last executing test programs: 11.344566247s ago: executing program 0 (id=750): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200030002000000bd00000000001000330002030000003fff00000000000200000000000000002000570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 11.332172618s ago: executing program 0 (id=751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {0x3}, 0x1, 0xffffffffffffffff}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b04000", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a47df0340b0fdb7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048a53f1600"}}) 11.2505515s ago: executing program 0 (id=752): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000500)=@getae={0x40, 0x1f, 0x1, 0x70bd26, 0x25dfdbfd, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0xa, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7fff, 0x3504}}, 0x40}, 0x1, 0x0, 0x0, 0x40095}, 0x8000) 11.24788965s ago: executing program 0 (id=753): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000000fe000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x0) 11.24771434s ago: executing program 0 (id=754): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000200"/88, 0x58) 11.24337337s ago: executing program 0 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x73, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x8, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x3b, {0x3b, 0x2, "c26313852642792c3cbdeace918d0fb74224cc4b44b72fb0ff0300002a52973661d67a0c5540c1a1d959ad58fe59444ec9a4134e73a6783995"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x600840) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000100)={0x7, 0xfffffffe, 0x1, 0x0, 0xf}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x73, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x8, 0x1}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x3b, {0x3b, 0x2, "c26313852642792c3cbdeace918d0fb74224cc4b44b72fb0ff0300002a52973661d67a0c5540c1a1d959ad58fe59444ec9a4134e73a6783995"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x600840) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000100)={0x7, 0xfffffffe, 0x1, 0x0, 0xf}) (async) 3.122206372s ago: executing program 1 (id=819): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x21, 0x70bd2a, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x400, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x4000000, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@tmpl={0x144, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2b}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xff, 0x0, 0x400, 0xfffffffe}, {{@in6=@private2, 0x0, 0x32}, 0xa, @in=@multicast1, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffff}, {{@in6=@loopback={0x3000000000000000}, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x10, 0x1}]}]}, 0x1fc}}, 0x0) 3.121218722s ago: executing program 1 (id=821): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c020000210001000000000001000000000000fffd0000000000000000000000fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0003000000000002cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a00020000000000000000000000000000000000ac1e0001000000000000000063f728e9497e7331000000000000000000000000000000000000000000000000000000006c01000006350000020002"], 0x27c}}, 0x0) 3.108095072s ago: executing program 1 (id=822): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x21, 0x70bd2a, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x400, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x4000000, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@tmpl={0x104, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2b}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xff, 0x0, 0x400, 0xfffffffe}, {{@in6=@private2, 0x0, 0x32}, 0xa, @in=@multicast1, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffff}, {{@in6=@loopback={0x3000000}, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x10, 0x1}]}]}, 0x1bc}}, 0x0) 3.051668994s ago: executing program 1 (id=824): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e00000027bd70000000000004000900a800000001d78771b90bd8a3b4914783c5432d69ca5b9538a900000003000600000000"], 0x70}, 0x1, 0x7}, 0x10) 3.051417914s ago: executing program 1 (id=825): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20020000}}], 0x1, 0x4001c00) 3.050626054s ago: executing program 1 (id=826): r0 = socket$inet6(0xa, 0x3, 0x4) pwritev2(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000340)="94c0bb455a7fa228d31092cea7b91ab86e3621efe6522384d12731f03790dbcdf4", 0x21}], 0x1, 0x6, 0x1, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) write(r5, &(0x7f0000000140)='never\n', 0x6) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0xa, 0x7, 0x93, 0x0, 0x8, 0x5, 0x8, 0xc4, 0x1, 0x2, 0x9, 0x92, 0x0, 0xf, 0x80, 0x8, 0x8, 0x4, 0xb, '\x00', 0x2, 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = socket(0xa, 0x3, 0x3a) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r6) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="200025bd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4000000) syz_usb_connect(0x5, 0x192, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x300, 0x8, 0x5, 0x12, 0x8, 0x6}, 0xc, &(0x7f0000000580)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x0, 0x3}]}, 0x7, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xc04}}, {0x25, &(0x7f0000000640)=@string={0x25, 0x3, "f49e05f11fe7b7bcffe3d9bc98e3ce093fe2cc1fecfb890a2a6c655e5a85df92e56568"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x3d, &(0x7f0000000700)=@string={0x3d, 0x3, "697a025895aa6c9484d537d8b8b7b9a125057c07e4e06e7ed851e745af1999b4083a8b88dc5fcc9d7964712de18b32869f61b840b83b73a0f06cfa"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x438}}]}) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x40010) setsockopt$MRT6_ADD_MFC(r6, 0x3a, 0xcc, 0x0, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a313830360603551c030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c3f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d330800603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c996b8c265de9705cb4022073b7c77a5adb670a964219cf4f674f356aee2925f24fc810149d79691c7ad75d", 0x1d8, 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x8001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0xfffffff1}, 0x1c) ppoll(0x0, 0x0, 0x0, &(0x7f0000000140)={[0x6]}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000003c000280380003800c"], 0x68}}, 0xa040) getgroups(0xfffffffffffffdc5, 0x0) sendto$inet6(r0, &(0x7f0000000840)="d01161bf3827e16d44aa568cf7c2fa6f38a540a2d85082071690d8a3ea331705ef0d", 0x22, 0x4000891, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 2.254903364s ago: executing program 3 (id=828): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200030002000000bd00000000001000330002030000003fff00000000000200000000000000000020570d45f3dd65602100000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 2.238169374s ago: executing program 3 (id=829): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x70) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2.106557678s ago: executing program 3 (id=830): creat(&(0x7f0000000000)='./file0\x00', 0x40) lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="040001000000000010000700000000002000030000000000"], 0x2c, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) 2.106375868s ago: executing program 3 (id=831): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x21, 0x70bd2a, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x400, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x4000000, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2b}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xff, 0x0, 0x400, 0xfffffffe}, {{@in6=@private2, 0x0, 0x32}, 0xa, @in=@multicast1, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffff}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x10, 0x1, 0x4000000}]}]}, 0x17c}}, 0x0) 2.105960988s ago: executing program 3 (id=832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000030d000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.103347538s ago: executing program 3 (id=833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000001840)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400cc00}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x8, 0x7a, 0x5, "e052eb2c", "2429b4e2"}}, 0x0}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x4002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0xf7, 0x1, 0x3, 0x1, 0x1, 0xe, {0x9, 0x21, 0x40, 0x10, 0x1, {0x22, 0xae4}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf8, 0xf9, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x2, 0x80, 0x1}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2, 0x7, 0x6, 0x20, 0x5}, 0x38, &(0x7f00000000c0)={0x5, 0xf, 0x38, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6c, 0x9, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x8, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x9, 0x0, 0x481, [0xff00, 0xff003f, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x7, 0x2}]}, 0x9, [{0xae, &(0x7f0000000180)=@string={0xae, 0x3, "4b792e98b33ffa2546c74657d79d832d0347215cae92c8e33754e203eb139a282c784299589b7571590e7cb7f46474001a0ece809d6e42437400dc23529fba14559f46535bc9da316f96ca0d6670077bb20db46c4d0eec35f3c9cd38697185f43be8241da53360fb540d289feb4cfc078defb721139c329174ebb4bd19e88d08496871124f52215c4f482e4ee6ae068c68bcd623f803c392b09e37d5e91387be61c0867f379d7d4d630de0fe"}}, {0x8b, &(0x7f0000000300)=@string={0x8b, 0x3, "42bc3c21c2ebab1b7cf6c6c80bd771f431a66fb95d2a674a014f16252720fd2783b117171fec1fcc91192b83904ce1820a528a2c1a7496ec6378903c095284a7ae98f8bd2889aa82107d671be96876699f84976af71a6631a08e22ff7761e5b6e4c9bc3795cb3818f0d8ccf475ae40dd9bd5aecdd2ddc2a3d0fdf61cf873f6c0b6c1fc4c2a4f49dd13"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x27, &(0x7f0000000400)=@string={0x27, 0x3, "4171850b8e8a825593a9a5a21529ece9dc20071e202d930d12022a196b8da1ed13128144b6"}}, {0x9a, &(0x7f0000000440)=@string={0x9a, 0x3, "95fc098c90d4a96c76f9b3f163ff6a52a20d2bc4800aac0931cc498477ee6807b67dc2eb2e7bc004fb9c958781f640e2caad3c7206c115c8e6cf8b51847e63333ef92245671b60e44f413dda32bf7316b68e6d5374c0072b6ed5ef61c75250d19d30c85c584ff0027373d087dec978b2b87d6cebe6f4918f2bcc93b81d1067f83d76ac47a64ec4c76bc8fc2d29a54b5f05edee121af411ec"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x814}}, {0x27, &(0x7f0000000540)=@string={0x27, 0x3, "2b3142b252c8447f799f2873820dbc3e4523b35a83676bbc50647ab81a8ef0e6f8767b6053"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x426}}, {0x10, &(0x7f00000005c0)=@string={0x10, 0x3, "0839bb6a1b90d1c3a1397bc9e359"}}]}) syz_usb_ep_write(r4, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 989.849665ms ago: executing program 2 (id=837): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x901, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x3, 0x400, 0x4, 0x4, 0x7fff, 0xffffffff, 0x8, 0xfffffffffffffffa, 0xeef, 0x8001, 0x0, 0x3, 0x26, 0x2, 0x800], 0xf000, 0x80190}) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r7, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r4, &(0x7f0000000040)=[{}, {}], 0x2, 0x4d0d) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0x2, 0x4) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'unlock', ' ', 'none'}, 0xc) 138.475117ms ago: executing program 2 (id=838): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x901, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'unlock', ' ', 'none'}, 0xc) 126.177387ms ago: executing program 2 (id=839): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) syz_io_uring_setup(0x1727, &(0x7f00000002c0)={0x0, 0x7f9d, 0x4000, 0x1, 0xba}, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = eventfd2(0x0, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2, @ANYBLOB="9b0f2bbd7000ffdbdf2501000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040100) 70.454408ms ago: executing program 2 (id=840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {0x3}, 0x1, 0xffffffffffffffff}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b04000", "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a47df0340b0fdb7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048a53f1600"}}) 50.590069ms ago: executing program 2 (id=841): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe00"/88, 0x58) 0s ago: executing program 2 (id=842): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x21, 0x70bd2a, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x400, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x4000000, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}, [@tmpl={0x144, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2b}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xff, 0x0, 0x400, 0xfffffffe}, {{@in6=@private2, 0x0, 0x32}, 0xa, @in=@multicast1, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffff}, {{@in6=@loopback={0x80ffffffffffffff}, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in=@loopback, 0x0, 0x6c}, 0x2, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x10, 0x1}]}]}, 0x1fc}}, 0x0) kernel console output (not intermixed with test programs): 1, Product=2, SerialNumber=3 [ 28.397173][ T9] usb 4-1: Product: syz [ 28.401519][ T9] usb 4-1: Manufacturer: syz [ 28.406144][ T9] usb 4-1: SerialNumber: syz [ 28.411630][ T9] usb 4-1: Interface #1 referenced by multiple IADs [ 28.526713][ T36] audit: type=1400 audit(1786113042.540:257): avc: denied { read } for pid=481 comm="syz.0.67" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.548110][ T36] audit: type=1400 audit(1786113042.540:258): avc: denied { open } for pid=481 comm="syz.0.67" path="cgroup:[4026532299]" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.571585][ T36] audit: type=1400 audit(1786113042.540:259): avc: denied { create } for pid=481 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 28.591994][ T36] audit: type=1400 audit(1786113042.540:260): avc: denied { ioctl } for pid=481 comm="syz.0.67" path="cgroup:[4026532299]" dev="nsfs" ino=4026532299 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 28.622288][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 28.632831][ T9] usb 4-1: USB disconnect, device number 2 [ 28.665458][ T36] audit: type=1400 audit(1786113042.680:261): avc: denied { ioctl } for pid=487 comm="syz.2.70" path="socket:[4775]" dev="sockfs" ino=4775 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.988481][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.018500][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.138560][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 29.146123][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 29.157567][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 29.169885][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.183084][ T311] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.192248][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 29.198075][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.212508][ T10] usb 3-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.226630][ T311] usb 1-1: config 0 descriptor?? [ 29.231863][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 29.243278][ T10] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 29.253659][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.263189][ T10] usb 3-1: config 0 descriptor?? [ 29.285286][ T36] audit: type=1400 audit(1786113043.300:262): avc: denied { read write } for pid=509 comm="syz.3.80" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.384808][ T9] usb 2-1: USB disconnect, device number 2 [ 29.644663][ T311] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 29.652895][ T311] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 29.664401][ T311] microsoft 0003:045E:07DA.0001: no inputs found [ 29.670895][ T437] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 29.678463][ T311] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 29.691256][ T502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.700281][ T502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.734911][ T10] ortek 0003:1223:3F07.0002: unknown main item tag 0x4 [ 29.743985][ T10] ortek 0003:1223:3F07.0002: unknown main item tag 0x5 [ 29.750970][ T10] ortek 0003:1223:3F07.0002: unknown main item tag 0x2 [ 29.758011][ T10] ortek 0003:1223:3F07.0002: unexpected long global item [ 29.765435][ T10] ortek 0003:1223:3F07.0002: probe with driver ortek failed with error -22 [ 29.839659][ T437] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 29.848015][ T437] usb 4-1: config 127 has no interface number 0 [ 29.854455][ T437] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 29.867462][ T437] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 29.876597][ T437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.884684][ T437] usb 4-1: Product: syz [ 29.888890][ T437] usb 4-1: Manufacturer: syz [ 29.893502][ T437] usb 4-1: SerialNumber: syz [ 29.899502][ T516] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 29.980671][ T65] usb 3-1: USB disconnect, device number 3 [ 30.231347][ T523] netlink: 'syz.1.84': attribute type 8 has an invalid length. [ 30.308564][ T516] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 30.356266][ T65] usb 1-1: USB disconnect, device number 4 [ 30.381240][ T531] process 'syz.1.86' launched './file0' with NULL argv: empty string added [ 30.425935][ T537] FAULT_INJECTION: forcing a failure. [ 30.425935][ T537] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 30.439569][ T537] CPU: 1 UID: 0 PID: 537 Comm: syz.0.90 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 30.439599][ T537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.439619][ T537] Call Trace: [ 30.439625][ T537] [ 30.439633][ T537] __dump_stack+0x21/0x30 [ 30.439672][ T537] dump_stack_lvl+0x140/0x1c0 [ 30.439700][ T537] ? __cfi_dump_stack_lvl+0x10/0x10 [ 30.439728][ T537] ? unwind_get_return_address+0x51/0x90 [ 30.439753][ T537] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.439778][ T537] dump_stack+0x19/0x20 [ 30.439804][ T537] should_fail_ex+0x3c2/0x510 [ 30.439829][ T537] should_fail+0xf/0x20 [ 30.439848][ T537] should_fail_usercopy+0x1e/0x30 [ 30.439871][ T537] _copy_from_user+0x20/0xa0 [ 30.439897][ T537] ___sys_recvmsg+0x174/0x590 [ 30.439920][ T537] ? __sys_recvmsg+0x2a0/0x2a0 [ 30.439942][ T537] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 30.439965][ T537] ? selinux_file_permission+0x318/0xb60 [ 30.439988][ T537] do_recvmmsg+0x36d/0x7f0 [ 30.440018][ T537] ? __sys_recvmmsg+0x2a0/0x2a0 [ 30.440039][ T537] ? __cfi_vfs_write+0x10/0x10 [ 30.440061][ T537] ? fput+0x1a4/0x230 [ 30.440090][ T537] __x64_sys_recvmmsg+0x199/0x250 [ 30.440112][ T537] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 30.440134][ T537] ? __kasan_check_read+0x15/0x20 [ 30.440154][ T537] x64_sys_call+0x292c/0x2ee0 [ 30.440172][ T537] do_syscall_64+0x57/0xf0 [ 30.440194][ T537] ? clear_bhb_loop+0x50/0xa0 [ 30.440224][ T537] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 30.440248][ T537] RIP: 0033:0x7fb67359e0d9 [ 30.440265][ T537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.440281][ T537] RSP: 002b:00007fb674384028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 30.440305][ T537] RAX: ffffffffffffffda RBX: 00007fb673825fa0 RCX: 00007fb67359e0d9 [ 30.440320][ T537] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000003 [ 30.440333][ T537] RBP: 00007fb674384090 R08: 0000000000000000 R09: 0000000000000000 [ 30.440346][ T537] R10: 0000000000002102 R11: 0000000000000246 R12: 0000000000000001 [ 30.440360][ T537] R13: 00007fb673826038 R14: 00007fb673825fa0 R15: 00007ffdc16b8528 [ 30.440377][ T537] [ 30.690912][ T516] kvm: emulating exchange as write [ 30.697312][ T516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.715756][ T516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.810576][ T437] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 30.827498][ T437] asix 4-1:127.57: probe with driver asix failed with error -71 [ 30.838714][ T437] usb 4-1: USB disconnect, device number 3 [ 30.993815][ T571] netlink: 96 bytes leftover after parsing attributes in process `syz.2.104'. [ 31.023446][ T575] netlink: 'syz.2.106': attribute type 8 has an invalid length. [ 31.085630][ T583] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 31.094710][ T583] tipc: Started in network mode [ 31.100996][ T583] tipc: Node identity 7f000001, cluster identity 4711 [ 31.116502][ T583] tipc: Enabling of bearer rejected, failed to enable media [ 31.140851][ T583] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 31.158653][ T583] tipc: Enabled bearer , priority 10 [ 31.182785][ T592] capability: warning: `syz.1.113' uses deprecated v2 capabilities in a way that may be insecure [ 31.200576][ T592] Zero length message leads to an empty skb [ 31.481277][ T625] loop7: detected capacity change from 0 to 7 [ 31.499098][ T630] netlink: 96 bytes leftover after parsing attributes in process `syz.2.130'. [ 31.514936][ T65] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.543833][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 31.553795][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 31.563021][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.574396][ T637] netlink: 'syz.2.133': attribute type 8 has an invalid length. [ 31.579093][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 31.591274][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.599686][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 31.608902][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.619006][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 31.628229][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.638585][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 31.647809][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.670551][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 31.680100][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.689148][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 31.698356][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.702364][ T65] usb 2-1: unable to get BOS descriptor or descriptor too short [ 31.716377][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 31.720107][ T65] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.725627][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.743894][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 31.746050][ T65] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 31.753082][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.762797][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 31.780523][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.789605][ T65] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 31.836838][ T65] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 31.846527][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.855555][ T65] usb 2-1: Product: syz [ 31.860438][ T65] usb 2-1: Manufacturer: syz [ 31.865202][ T65] usb 2-1: SerialNumber: syz [ 31.949795][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 31.958293][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.968659][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.988120][ T10] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 32.018000][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.026651][ T10] usb 4-1: Product: syz [ 32.037696][ T10] usb 4-1: Manufacturer: syz [ 32.042524][ T10] usb 4-1: SerialNumber: syz [ 32.054358][ T10] usb 4-1: selecting invalid altsetting 1 [ 32.075265][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 32.134467][ T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.178471][ T65] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 32.198710][ T65] usb 2-1: USB disconnect, device number 3 [ 32.268690][ T437] tipc: Node number set to 2130706433 [ 32.528455][ T437] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.678891][ T437] usb 3-1: Using ep0 maxpacket: 32 [ 32.687901][ T437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 32.716327][ T437] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 32.738283][ T437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 32.760045][ T437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 32.772883][ T437] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 32.782285][ T437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.797212][ T437] usb 3-1: Product: syz [ 32.805054][ T437] usb 3-1: Manufacturer: syz [ 32.812302][ T437] usb 3-1: SerialNumber: syz [ 32.822381][ T437] usb 3-1: config 0 descriptor?? [ 32.837888][ T670] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 32.847097][ T437] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 32.864906][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 32.864956][ T36] audit: type=1400 audit(1786113046.880:304): avc: denied { read } for pid=95 comm="acpid" name="event3" dev="devtmpfs" ino=465 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.899472][ C1] xpad 3-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 32.934969][ T36] audit: type=1400 audit(1786113046.880:305): avc: denied { open } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=465 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.967660][ T36] audit: type=1400 audit(1786113046.880:306): avc: denied { ioctl } for pid=95 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=465 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.975886][ T689] netlink: 'syz.0.153': attribute type 8 has an invalid length. [ 33.067172][ T36] audit: type=1400 audit(1786113047.080:307): avc: denied { wake_alarm } for pid=669 comm="syz.2.146" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.091242][ T694] : renamed from vlan0 (while UP) [ 33.097657][ T65] usb 3-1: USB disconnect, device number 4 [ 33.097700][ C1] xpad 3-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 33.125899][ T36] audit: type=1400 audit(1786113047.110:308): avc: denied { open } for pid=691 comm="syz.0.155" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=6723 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.152924][ T699] netlink: 96 bytes leftover after parsing attributes in process `syz.1.158'. [ 33.192115][ T36] audit: type=1400 audit(1786113047.210:309): avc: denied { setopt } for pid=700 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.218448][ T36] audit: type=1400 audit(1786113047.210:310): avc: denied { bind } for pid=700 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.475639][ T36] audit: type=1400 audit(1786113047.490:311): avc: denied { getopt } for pid=717 comm="syz.1.165" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.495981][ T36] audit: type=1400 audit(1786113047.490:312): avc: denied { connect } for pid=717 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.537594][ T720] usb usb8: usbfs: process 720 (syz.1.166) did not claim interface 0 before use [ 33.558468][ T437] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 33.708461][ T437] usb 1-1: Using ep0 maxpacket: 32 [ 33.719678][ T437] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.738838][ T437] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 33.749075][ T437] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 33.769603][ T36] audit: type=1400 audit(1786113047.790:313): avc: denied { execute } for pid=732 comm="syz.2.171" name="file0" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.769862][ T437] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 33.818444][ T437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.826589][ T437] usb 1-1: Product: syz [ 33.838464][ T437] usb 1-1: Manufacturer: Ј [ 33.843053][ T437] usb 1-1: SerialNumber: syz [ 34.080049][ T437] usb 1-1: USB disconnect, device number 5 [ 34.514756][ T65] usb 4-1: USB disconnect, device number 4 [ 35.043015][ T437] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 35.202837][ T783] netlink: 'syz.0.189': attribute type 8 has an invalid length. [ 35.221103][ T437] usb 2-1: unable to get BOS descriptor or descriptor too short [ 35.237116][ T437] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.264003][ T437] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.275011][ T437] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 35.285052][ T437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.295186][ T437] usb 2-1: Product: syz [ 35.300074][ T437] usb 2-1: Manufacturer: syz [ 35.304789][ T437] usb 2-1: SerialNumber: syz [ 35.316660][ T437] usb 2-1: selecting invalid altsetting 1 [ 35.330407][ T437] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 35.351695][ T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.508477][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 35.590338][ T794] fuse: Bad value for 'fd' [ 35.669630][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.679965][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 35.692489][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 35.697465][ T801] fuse: Unknown parameter ' ' [ 35.701917][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.718435][ T9] usb 1-1: Product: syz [ 35.722658][ T9] usb 1-1: Manufacturer: syz [ 35.730213][ T9] usb 1-1: SerialNumber: syz [ 35.998497][ T65] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 36.150059][ T65] usb 3-1: not running at top speed; connect to a high speed hub [ 36.160131][ T65] usb 3-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 36.169455][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.177625][ T65] usb 3-1: Product: ᠌ [ 36.182282][ T65] usb 3-1: Manufacturer: ࠇ [ 36.186928][ T65] usb 3-1: SerialNumber: 㠁 [ 36.207627][ T826] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.239326][ T829] netlink: 'syz.3.206': attribute type 8 has an invalid length. [ 36.747292][ T785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.756285][ T785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.765103][ T9] cdc_ncm 1-1:1.0: bind() failure [ 36.772869][ T9] usb 1-1: USB disconnect, device number 6 [ 37.115291][ T65] usb 3-1: 1:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 37.123834][ T65] usb 3-1: found format II with max.bitrate = 4, frame size=1 [ 37.131550][ T65] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 37.137983][ T65] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 37.150411][ T65] usb 3-1: USB disconnect, device number 5 [ 37.313407][ T858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.329060][ T858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.362471][ T862] futex_wake_op: syz.3.219 tries to shift op by 32; fix this program [ 37.585195][ T867] netlink: 'syz.3.221': attribute type 8 has an invalid length. [ 37.593071][ T844] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 37.761064][ T844] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 37.773557][ T844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 37.787927][ T844] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 41845, setting to 64 [ 37.799564][ T844] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 37.814484][ T844] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.823917][ T844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.832580][ T844] usb 1-1: SerialNumber: syz [ 37.842418][ T857] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 37.853782][ T844] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 37.862215][ T311] usb 2-1: USB disconnect, device number 4 [ 38.019442][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.051553][ T65] usb 1-1: USB disconnect, device number 7 [ 38.094175][ T886] rust_binder: 884:886 got transaction to invalid handle 1 [ 38.118660][ T886] rust_binder: 884:886 transaction call to 0:0 failed ENOENT, code 0 size 0-0 [ 38.136741][ T311] rust_binder: 884: undelivered TRANSACTION_ERROR: 29201 [ 38.188518][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 38.200855][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 38.209808][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 88, changing to 7 [ 38.228480][ T31] usb 4-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 38.237817][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.253485][ T31] usb 4-1: Product: х [ 38.257605][ T31] usb 4-1: Manufacturer: ⡛ [ 38.262303][ T31] usb 4-1: SerialNumber: ᱣ [ 38.303499][ T898] netlink: 'syz.1.234': attribute type 8 has an invalid length. [ 38.342416][ T904] bpf: Bad value for 'gid' [ 38.342418][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 38.342453][ T36] audit: type=1400 audit(1786113052.360:329): avc: denied { mounton } for pid=903 comm="syz.1.237" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 38.479502][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 38.492062][ T31] usb 4-1: USB disconnect, device number 5 [ 38.558514][ T65] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 38.692623][ T36] audit: type=1400 audit(1786113052.710:330): avc: denied { read append } for pid=919 comm="syz.0.244" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 38.716011][ T36] audit: type=1400 audit(1786113052.710:331): avc: denied { open } for pid=919 comm="syz.0.244" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 38.739743][ T844] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 38.747976][ T36] audit: type=1400 audit(1786113052.710:332): avc: denied { map } for pid=919 comm="syz.0.244" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 38.771990][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 38.789167][ T65] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 38.799579][ T65] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 38.810925][ T65] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 38.820249][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.828302][ T65] usb 3-1: Product: syz [ 38.832817][ T65] usb 3-1: Manufacturer: syz [ 38.837618][ T65] usb 3-1: SerialNumber: syz [ 38.849473][ T65] usb 3-1: selecting invalid altsetting 1 [ 38.855494][ T65] usb 3-1: unit 255 not found! [ 38.869628][ T65] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 38.889052][ T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.928456][ T844] usb 2-1: Using ep0 maxpacket: 16 [ 38.934874][ T844] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 38.943930][ T844] usb 2-1: config 0 has no interface number 0 [ 38.950116][ T844] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 38.959303][ T844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.969650][ T844] usb 2-1: config 0 descriptor?? [ 39.059045][ T926] netlink: 'syz.3.246': attribute type 8 has an invalid length. [ 39.082587][ T36] audit: type=1400 audit(1786113053.100:333): avc: denied { connect } for pid=927 comm="syz.3.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.185952][ T844] usbhid 2-1:0.1: can't add hid device: -71 [ 39.198487][ T844] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 39.211059][ T844] usb 2-1: USB disconnect, device number 5 [ 39.219657][ T928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=928 comm=syz.3.247 [ 39.376682][ T946] netlink: 'syz.0.255': attribute type 8 has an invalid length. [ 39.385990][ T948] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96 [ 39.743190][ T36] audit: type=1400 audit(1786113053.760:334): avc: denied { mounton } for pid=972 comm="syz.1.267" path="/proc/110/task" dev="proc" ino=8633 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 39.767993][ T36] audit: type=1400 audit(1786113053.790:335): avc: denied { setopt } for pid=972 comm="syz.1.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.804191][ T977] netlink: 'syz.1.268': attribute type 8 has an invalid length. [ 39.985392][ T36] audit: type=1400 audit(1786113054.000:336): avc: denied { bind } for pid=986 comm="syz.1.273" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.027178][ T36] audit: type=1400 audit(1786113054.000:337): avc: denied { name_bind } for pid=986 comm="syz.1.273" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 40.048562][ T36] audit: type=1400 audit(1786113054.000:338): avc: denied { node_bind } for pid=986 comm="syz.1.273" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 40.748660][ T311] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 40.899656][ T311] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 40.909536][ T311] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 40.919465][ T311] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.933792][ T311] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 40.943077][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.951138][ T311] usb 1-1: Product: syz [ 40.955330][ T311] usb 1-1: Manufacturer: syz [ 40.960003][ T311] usb 1-1: SerialNumber: syz [ 40.966138][ T311] hub 1-1:1.0: bad descriptor, ignoring hub [ 40.972453][ T311] hub 1-1:1.0: probe with driver hub failed with error -5 [ 41.101246][ T1040] netlink: 'syz.1.292': attribute type 8 has an invalid length. [ 41.172712][ T311] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 41.326569][ T437] usb 3-1: USB disconnect, device number 6 [ 41.352871][ T1063] netlink: 'syz.2.303': attribute type 8 has an invalid length. [ 41.368485][ T844] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 41.429306][ T1072] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1072 comm=syz.0.290 [ 41.458601][ T31] usb 1-1: USB disconnect, device number 8 [ 41.466027][ T31] usblp0: removed [ 41.468672][ T311] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 41.518451][ T844] usb 4-1: Using ep0 maxpacket: 16 [ 41.524010][ T844] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 41.533103][ T844] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 41.541226][ T844] usb 4-1: can't read configurations, error -22 [ 41.628495][ T311] usb 2-1: Invalid ep0 maxpacket: 64 [ 41.668501][ T844] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 41.758501][ T311] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 41.818486][ T844] usb 4-1: Using ep0 maxpacket: 16 [ 41.824108][ T844] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 41.833183][ T844] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 41.841168][ T844] usb 4-1: can't read configurations, error -22 [ 41.847616][ T844] usb usb4-port1: attempt power cycle [ 41.908530][ T311] usb 2-1: Invalid ep0 maxpacket: 64 [ 41.914123][ T311] usb usb2-port1: attempt power cycle [ 42.198501][ T844] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 42.218516][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 42.226301][ T844] usb 4-1: Using ep0 maxpacket: 16 [ 42.232104][ T844] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 42.241067][ T844] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 42.249051][ T844] usb 4-1: can't read configurations, error -22 [ 42.258530][ T311] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 42.278920][ T311] usb 2-1: Invalid ep0 maxpacket: 64 [ 42.378556][ T844] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 42.399002][ T844] usb 4-1: Using ep0 maxpacket: 16 [ 42.404697][ T844] usb 4-1: too many configurations: 70, using maximum allowed: 8 [ 42.408636][ T311] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 42.413822][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 42.428915][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 42.439218][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 42.439298][ T844] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 42.453223][ T311] usb 2-1: Invalid ep0 maxpacket: 64 [ 42.462107][ T844] usb 4-1: can't read configurations, error -22 [ 42.466517][ T311] usb usb2-port1: unable to enumerate USB device [ 42.475668][ T844] usb usb4-port1: unable to enumerate USB device [ 42.483273][ T31] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 42.492683][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.501004][ T31] usb 1-1: Product: syz [ 42.505355][ T31] usb 1-1: Manufacturer: syz [ 42.510013][ T31] usb 1-1: SerialNumber: syz [ 42.516527][ T31] usb 1-1: selecting invalid altsetting 1 [ 42.522763][ T31] usb 1-1: unit 255 not found! [ 42.529736][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 42.545733][ T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 42.742897][ T1115] netlink: 'syz.2.322': attribute type 8 has an invalid length. [ 43.028541][ T1144] netlink: 'syz.2.335': attribute type 8 has an invalid length. [ 44.079310][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 44.079330][ T36] audit: type=1400 audit(1786113058.100:356): avc: denied { rename } for pid=1166 comm="syz.2.343" name="file0" dev="tmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 44.327204][ T36] audit: type=1400 audit(1786113058.340:357): avc: denied { setopt } for pid=1186 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.346738][ T36] audit: type=1400 audit(1786113058.340:358): avc: denied { write } for pid=1186 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.478243][ T36] audit: type=1400 audit(1786113058.490:359): avc: denied { append } for pid=1195 comm="syz.1.355" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 44.506755][ T36] audit: type=1400 audit(1786113058.520:360): avc: denied { mounton } for pid=1195 comm="syz.1.355" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 44.558531][ T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 44.598565][ T46] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 44.701112][ T36] audit: type=1400 audit(1786113058.720:361): avc: denied { write } for pid=1205 comm="syz.1.358" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 44.710457][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 44.731148][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 44.739811][ T31] usb 4-1: config 1 has an invalid interface number: 242 but max is 2 [ 44.748188][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.762761][ T46] usb 3-1: config index 0 descriptor too short (expected 45, got 28) [ 44.774223][ T31] usb 4-1: config 1 has no interface number 2 [ 44.780654][ T46] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 44.788026][ T46] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 44.800920][ T31] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 44.811993][ T31] usb 4-1: config 1 interface 1 has no altsetting 0 [ 44.820565][ T46] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 44.829876][ T31] usb 4-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 44.839192][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.847320][ T46] usb 3-1: Product: syz [ 44.851573][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.859854][ T31] usb 4-1: Product: ៩鍯ஶ韘넄엶髩슛ϑꪝ⟢㑸ᘍ銙⣅ﶱઈ列㾼༼퍗藪℁遢絛靉ᔠ뻮భ⭩텠魨᥾玈㕆䘾첮塏쁶諨쟆謐გ꿇譬㘍鲷ⴺἆ䰲籏蟘ᝀꆾᄺ䳓ﱈ䘬ꭗ⟲䑛婷⫙ᄡ㣭뽁힑灕鏷ﹷ삑 愆蝭 [ 44.885587][ T46] usb 3-1: Manufacturer: syz [ 44.887398][ T36] audit: type=1400 audit(1786113058.910:362): avc: denied { map } for pid=1211 comm="syz.1.361" path="socket:[9817]" dev="sockfs" ino=9817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.890314][ T46] usb 3-1: SerialNumber: syz [ 44.918839][ T31] usb 4-1: Manufacturer: 밹୚ⴕ䲦덡疾ꩽ㬱뱮筝∨࿓䎠勁ৠԚꨏ큁餒惞﫶ꑏ疀턠½᤿跣絷ኞ醏ﱛࢧ鮈✻拒ꁁবᴈ㞙ԏ﫹Ⰻ푨棌幋槤撽棌䦚ힽ⌺葪ᠳ㷽䪝鬭꺀戚㐫䌃毠⌱䷯蜸鷝꛸䡵︽ᄃ鵟⪑㍸䗪弢鷽㨉娞鎖잿푘╀涟떧䧺蛑ڞꯈ꺴ઝ绋幧瘀з෫퓱鮶妗糋푄艗㎦堀ꁉ쇥᧠裢 [ 44.933642][ T36] audit: type=1400 audit(1786113058.910:363): avc: denied { read } for pid=1211 comm="syz.1.361" path="socket:[9817]" dev="sockfs" ino=9817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.954676][ T31] usb 4-1: SerialNumber: М [ 44.982599][ T46] rtl8150 3-1:1.0: couldn't find required endpoints [ 44.989613][ T46] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 45.012923][ T311] usb 1-1: USB disconnect, device number 9 [ 45.058800][ T1218] netlink: 96 bytes leftover after parsing attributes in process `syz.0.364'. [ 45.202644][ T1181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.207041][ T9] usb 3-1: USB disconnect, device number 7 [ 45.211708][ T1181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.231399][ T31] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 45.239339][ T31] usb 4-1: 1:1 : unsupported format bits 0x2004 [ 45.245643][ T31] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 45.255678][ T31] usb 4-1: selecting invalid altsetting 0 [ 45.261882][ T31] usb 4-1: selecting invalid altsetting 0 [ 45.274104][ T31] usb 4-1: USB disconnect, device number 10 [ 45.293115][ T521] udevd[521]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.346031][ T36] audit: type=1400 audit(1786113059.360:364): avc: denied { create } for pid=1236 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 45.441233][ T46] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 45.505804][ T1254] netlink: 96 bytes leftover after parsing attributes in process `syz.0.380'. [ 45.612616][ T46] usb 2-1: unable to get BOS descriptor or descriptor too short [ 45.620936][ T46] usb 2-1: not running at top speed; connect to a high speed hub [ 45.631354][ T46] usb 2-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 45.640509][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.648998][ T46] usb 2-1: Product: syz [ 45.653166][ T46] usb 2-1: Manufacturer: syz [ 45.657759][ T46] usb 2-1: SerialNumber: syz [ 45.689555][ T36] audit: type=1400 audit(1786113059.710:365): avc: denied { mount } for pid=1258 comm="syz.0.382" name="/" dev="overlay" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.782109][ T1269] netlink: 'syz.2.387': attribute type 8 has an invalid length. [ 45.816636][ T1272] netlink: 'syz.2.388': attribute type 6 has an invalid length. [ 45.877742][ T46] usb 2-1: USB disconnect, device number 10 [ 46.161919][ T1347] netlink: 96 bytes leftover after parsing attributes in process `syz.0.403'. [ 46.358472][ T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 46.451966][ T1360] SELinux: policydb string length 84 does not match expected length 8 [ 46.461966][ T1360] SELinux: failed to load policy [ 46.509710][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 46.516516][ T9] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 46.525637][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.534910][ T9] usb 3-1: config 0 descriptor?? [ 46.943253][ T9] elecom 0003:056E:00FC.0003: unknown main item tag 0x3 [ 46.951832][ T9] elecom 0003:056E:00FC.0003: unknown main item tag 0x2 [ 46.959115][ T9] elecom 0003:056E:00FC.0003: unknown main item tag 0x0 [ 46.966107][ T9] elecom 0003:056E:00FC.0003: unknown main item tag 0x0 [ 46.973343][ T9] elecom 0003:056E:00FC.0003: unknown main item tag 0x0 [ 46.981245][ T9] elecom 0003:056E:00FC.0003: unknown main item tag 0x0 [ 46.988303][ T9] elecom 0003:056E:00FC.0003: unknown main item tag 0x0 [ 46.995925][ T9] elecom 0003:056E:00FC.0003: unknown main item tag 0x0 [ 47.003401][ T9] elecom 0003:056E:00FC.0003: unknown main item tag 0x0 [ 47.019177][ T9] elecom 0003:056E:00FC.0003: unknown main item tag 0x0 [ 47.026975][ T9] elecom 0003:056E:00FC.0003: unknown main item tag 0x0 [ 47.034047][ T9] elecom 0003:056E:00FC.0003: unknown main item tag 0x0 [ 47.038775][ T46] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 47.041909][ T9] elecom 0003:056E:00FC.0003: unknown main item tag 0x0 [ 47.056808][ T9] elecom 0003:056E:00FC.0003: hidraw0: USB HID v0.c1 Device [HID 056e:00fc] on usb-dummy_hcd.2-1/input0 [ 47.218477][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 47.224819][ T46] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.235804][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 47.242510][ T46] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 47.251850][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.260628][ T46] usb 1-1: config 0 descriptor?? [ 47.399466][ T65] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 47.568479][ T65] usb 4-1: Using ep0 maxpacket: 16 [ 47.574828][ T65] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 47.585202][ T65] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 47.596175][ T65] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 47.609313][ T65] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 47.618739][ T65] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.627944][ T65] usb 4-1: config 0 descriptor?? [ 47.672320][ T46] hid-generic 0003:1E71:2009.0004: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 47.997639][ T65] usb 4-1: string descriptor 0 read error: -71 [ 48.004803][ T65] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 48.012905][ T65] usb 4-1: USB disconnect, device number 11 [ 48.174787][ T46] usb 1-1: USB disconnect, device number 10 [ 48.214704][ T1406] netlink: 96 bytes leftover after parsing attributes in process `syz.0.424'. [ 48.568527][ T46] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 48.638470][ T65] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 48.718461][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 48.724722][ T46] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 48.736180][ T46] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 48.749194][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 48.755920][ T46] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 48.765253][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.774258][ T46] usb 1-1: config 0 descriptor?? [ 48.799574][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.810706][ T65] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.828525][ T65] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 48.837718][ T65] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.852678][ T65] usb 2-1: config 0 descriptor?? [ 49.120162][ T9] usb 3-1: USB disconnect, device number 8 [ 49.165264][ T1444] netlink: 'syz.2.441': attribute type 16 has an invalid length. [ 49.192515][ T46] wacom 0003:056A:032C.0005: hidraw0: USB HID v10.01 Device [HID 056a:032c] on usb-dummy_hcd.0-1/input0 [ 49.270011][ T65] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 49.281674][ T65] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 49.289618][ T65] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 49.297234][ T65] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 49.305193][ T65] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 49.315957][ T65] playstation 0003:054C:0DF2.0006: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 49.389298][ T46] usb 1-1: USB disconnect, device number 11 [ 49.414429][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 49.414448][ T36] audit: type=1400 audit(1786113063.430:372): avc: denied { ioctl } for pid=1459 comm="syz.2.446" path="socket:[14027]" dev="sockfs" ino=14027 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.467570][ T1422] ======================================================= [ 49.467570][ T1422] WARNING: The mand mount option has been deprecated and [ 49.467570][ T1422] and is ignored by this kernel. Remove the mand [ 49.467570][ T1422] option from the mount to silence this warning. [ 49.467570][ T1422] ======================================================= [ 49.508461][ T36] audit: type=1400 audit(1786113063.470:373): avc: denied { read } for pid=1459 comm="syz.2.446" path="socket:[14027]" dev="sockfs" ino=14027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 49.541184][ T36] audit: type=1400 audit(1786113063.560:374): avc: denied { mounton } for pid=1421 comm="syz.1.432" path="/89/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 49.563337][ T1463] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 49.574475][ T65] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 9: -71 [ 49.574961][ T36] audit: type=1400 audit(1786113063.590:375): avc: denied { lock } for pid=1421 comm="syz.1.432" path="socket:[14034]" dev="sockfs" ino=14034 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.600260][ T65] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -71 [ 49.617787][ T65] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 49.626948][ T65] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 49.635766][ T65] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -71 [ 49.650877][ T65] usb 2-1: USB disconnect, device number 11 [ 49.768461][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 49.898450][ T31] usb 3-1: device descriptor read/64, error -71 [ 49.926290][ T1472] netlink: 96 bytes leftover after parsing attributes in process `syz.0.450'. [ 50.138442][ T31] usb 3-1: device descriptor read/64, error -71 [ 50.288489][ T65] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 50.378496][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 50.398466][ T844] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 50.439153][ T65] usb 1-1: not running at top speed; connect to a high speed hub [ 50.447654][ T65] usb 1-1: config 192 has an invalid interface number: 154 but max is 0 [ 50.456153][ T65] usb 1-1: config 192 has no interface number 0 [ 50.462580][ T65] usb 1-1: config 192 interface 154 altsetting 0 endpoint 0xC has invalid maxpacket 2560, setting to 64 [ 50.468502][ T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 50.474071][ T65] usb 1-1: config 192 interface 154 altsetting 0 endpoint 0xD has invalid maxpacket 2047, setting to 64 [ 50.494024][ T65] usb 1-1: New USB device found, idVendor=12d1, idProduct=1412, bcdDevice= 0.00 [ 50.503142][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.511218][ T65] usb 1-1: Product: syz [ 50.515514][ T65] usb 1-1: Manufacturer: syz [ 50.520166][ T31] usb 3-1: device descriptor read/64, error -71 [ 50.526438][ T65] usb 1-1: SerialNumber: syz [ 50.532121][ T1482] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 50.539369][ T1482] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 50.569554][ T844] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 50.577731][ T844] usb 4-1: config 0 has no interface number 0 [ 50.583894][ T844] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 50.594803][ T844] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 50.606172][ T844] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 50.615264][ T844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.623311][ T844] usb 4-1: Product: syz [ 50.627505][ T844] usb 4-1: Manufacturer: syz [ 50.632189][ T844] usb 4-1: SerialNumber: syz [ 50.638022][ T844] usb 4-1: config 0 descriptor?? [ 50.643360][ T1493] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 50.644413][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29715, setting to 64 [ 50.652769][ T844] usb-storage 4-1:0.20: USB Mass Storage device detected [ 50.663332][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 50.677770][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.679890][ T844] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 50.695865][ T9] usb 2-1: config 0 descriptor?? [ 50.701272][ T1501] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 50.711820][ T9] hub 2-1:0.0: USB hub found [ 50.747803][ T1482] fuse: Bad value for 'fd' [ 50.755176][ T65] usb-storage 1-1:192.154: USB Mass Storage device detected [ 50.762586][ T31] usb 3-1: device descriptor read/64, error -71 [ 50.810965][ T65] usb 1-1: USB disconnect, device number 12 [ 50.853445][ T437] usb 4-1: USB disconnect, device number 12 [ 50.878609][ T31] usb usb3-port1: attempt power cycle [ 51.218476][ T31] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 51.239570][ T31] usb 3-1: device descriptor read/8, error -71 [ 51.269244][ T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 51.279314][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 51.287167][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 51.314777][ T9] usb 2-1: USB disconnect, device number 12 [ 51.369441][ T31] usb 3-1: device descriptor read/8, error -71 [ 51.389227][ T1514] netlink: 'syz.3.467': attribute type 8 has an invalid length. [ 51.463044][ T36] audit: type=1400 audit(1786113065.480:376): avc: denied { create } for pid=1526 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 51.515835][ T36] audit: type=1400 audit(1786113065.490:377): avc: denied { sys_admin } for pid=1526 comm="syz.0.471" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 51.628518][ T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 51.659555][ T31] usb 3-1: device descriptor read/8, error -71 [ 51.733999][ T36] audit: type=1400 audit(1786113065.750:378): avc: denied { append } for pid=1552 comm="syz.3.481" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 51.799552][ T31] usb 3-1: device descriptor read/8, error -71 [ 51.814312][ T36] audit: type=1400 audit(1786113065.830:379): avc: denied { getopt } for pid=1552 comm="syz.3.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.824111][ T1554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.859505][ T1554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.909651][ T31] usb usb3-port1: unable to enumerate USB device [ 51.968465][ T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 52.048457][ T311] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 52.119948][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.131692][ T9] usb 1-1: New USB device found, idVendor=04b8, idProduct=02f9, bcdDevice= 0.40 [ 52.141004][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.149162][ T9] usb 1-1: Product: syz [ 52.153509][ T9] usb 1-1: Manufacturer: syz [ 52.158181][ T9] usb 1-1: SerialNumber: syz [ 52.199593][ T311] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 52.212042][ T311] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.222256][ T311] usb 4-1: config 0 has no interfaces? [ 52.227786][ T311] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 52.236959][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.245776][ T311] usb 4-1: config 0 descriptor?? [ 52.370591][ T9] usb 1-1: USB disconnect, device number 13 [ 52.452474][ T10] usb 4-1: USB disconnect, device number 13 [ 52.800561][ T311] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 52.828885][ T36] audit: type=1400 audit(1786113066.850:380): avc: denied { mount } for pid=1575 comm="syz.1.488" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 52.851524][ T36] audit: type=1400 audit(1786113066.850:381): avc: denied { read } for pid=1575 comm="syz.1.488" name="trace_pipe" dev="tracefs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 52.874176][ T1576] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 52.958474][ T311] usb 3-1: Using ep0 maxpacket: 16 [ 52.964888][ T311] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 52.979807][ T311] usb 3-1: config 0 interface 0 has no altsetting 0 [ 52.986570][ T311] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 52.995884][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.008033][ T311] usb 3-1: config 0 descriptor?? [ 53.105566][ T1590] netlink: 96 bytes leftover after parsing attributes in process `syz.0.493'. [ 53.368439][ T10] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 53.417401][ T311] hid (null): unknown global tag 0xc [ 53.424494][ T311] cypress 0003:04B4:07B1.0007: unknown global tag 0xc [ 53.431605][ T311] cypress 0003:04B4:07B1.0007: item 0 0 1 12 parsing failed [ 53.439664][ T311] cypress 0003:04B4:07B1.0007: parse failed [ 53.445746][ T311] cypress 0003:04B4:07B1.0007: probe with driver cypress failed with error -22 [ 53.519730][ T10] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 53.530743][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 53.539706][ T10] usb 4-1: string descriptor 0 read error: -22 [ 53.546004][ T10] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.40 [ 53.555166][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.564687][ T1592] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 53.626632][ T65] usb 3-1: USB disconnect, device number 13 [ 53.749023][ T31] rust_binder: 1575: undelivered death notification, 0000000000000000 [ 53.772078][ T1608] netlink: 'syz.1.500': attribute type 8 has an invalid length. [ 54.148465][ T65] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 54.211720][ T10] cypress 0003:04B4:ED81.0008: global environment stack underflow [ 54.219858][ T10] cypress 0003:04B4:ED81.0008: item 0 2 1 11 parsing failed [ 54.227480][ T10] cypress 0003:04B4:ED81.0008: parse failed [ 54.233665][ T10] cypress 0003:04B4:ED81.0008: probe with driver cypress failed with error -22 [ 54.298598][ T65] usb 2-1: Using ep0 maxpacket: 16 [ 54.306369][ T65] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 54.315548][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.323628][ T65] usb 2-1: Product: syz [ 54.327797][ T65] usb 2-1: Manufacturer: syz [ 54.332470][ T65] usb 2-1: SerialNumber: syz [ 54.421769][ T844] usb 4-1: USB disconnect, device number 14 [ 54.542317][ T1629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.550981][ T1629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.565081][ T65] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.572103][ T65] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 54.581268][ T65] usb 2-1: USB disconnect, device number 13 [ 54.588447][ T31] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 54.599901][ T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.738509][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 54.744883][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 54.751701][ T31] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 54.760799][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.769720][ T31] usb 3-1: config 0 descriptor?? [ 54.904608][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 54.904628][ T36] audit: type=1400 audit(1786113068.920:384): avc: denied { create } for pid=1646 comm="syz.0.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 54.964978][ T1650] syz.3.519: attempt to access beyond end of device [ 54.964978][ T1650] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 54.979942][ T1650] FAT-fs (loop3): unable to read boot sector [ 55.006903][ T1653] netlink: 'syz.3.520': attribute type 8 has an invalid length. [ 55.182169][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 55.188205][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 55.197265][ T31] usb 3-1: USB disconnect, device number 14 [ 55.278667][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 55.298046][ T1679] netlink: 'syz.1.531': attribute type 8 has an invalid length. [ 55.357608][ T1686] netlink: 72 bytes leftover after parsing attributes in process `syz.0.535'. [ 55.407001][ T36] audit: type=1400 audit(1786113069.420:385): avc: denied { remount } for pid=1692 comm="syz.1.538" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 55.436762][ T36] audit: type=1400 audit(1786113069.450:386): avc: denied { create } for pid=1697 comm="syz.0.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 55.461429][ T36] audit: type=1400 audit(1786113069.480:387): avc: denied { create } for pid=1700 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 55.481362][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 55.492563][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 55.508612][ T9] usb 4-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice= 0.40 [ 55.522020][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.530086][ T9] usb 4-1: Product: syz [ 55.534361][ T9] usb 4-1: Manufacturer: syz [ 55.544563][ T9] usb 4-1: SerialNumber: syz [ 55.572455][ T1708] netlink: 'syz.1.543': attribute type 8 has an invalid length. [ 55.698629][ T31] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 55.753653][ T1660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.762329][ T1660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.771432][ T1660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.780453][ T1660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.788649][ T1660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.797362][ T1660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.806481][ T1660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.815887][ T1660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.825134][ T1660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.833712][ T844] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 55.842510][ T1660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.859225][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 55.866509][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 55.868887][ T9] usb 4-1: cannot setup if 2: error -71 [ 55.878121][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.893131][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 55.898697][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 55.906437][ T31] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 55.924417][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.935400][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 55.939156][ T31] usb 1-1: config 0 descriptor?? [ 55.953233][ T9] usb 4-1: cannot setup if 2: error -71 [ 55.966572][ T9] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 55.989132][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 55.998558][ T9] usb 4-1: cannot setup if 2: error -71 [ 56.008422][ T844] usb 2-1: Using ep0 maxpacket: 8 [ 56.013236][ T9] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 56.018115][ T844] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice= 0.40 [ 56.026004][ T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 56.032016][ T844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.050105][ T9] usb 4-1: USB disconnect, device number 15 [ 56.078460][ T844] usb 2-1: Product: syz [ 56.082704][ T844] usb 2-1: Manufacturer: syz [ 56.087397][ T844] usb 2-1: SerialNumber: syz [ 56.300002][ T1710] futex_wake_op: syz.1.544 tries to shift op by 32; fix this program [ 56.312406][ T844] usb 2-1: Invalid firmware size=18. [ 56.320307][ T844] usb 2-1: USB disconnect, device number 14 [ 56.390620][ T36] audit: type=1400 audit(1786113070.410:388): avc: denied { read append } for pid=1720 comm="syz.3.549" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.415227][ T36] audit: type=1400 audit(1786113070.410:389): avc: denied { open } for pid=1720 comm="syz.3.549" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.421173][ T31] hid-multitouch 0003:0457:07DA.0009: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 56.552553][ T1727] netlink: 96 bytes leftover after parsing attributes in process `syz.2.550'. [ 56.593077][ T36] audit: type=1400 audit(1786113070.600:390): avc: denied { setattr } for pid=1730 comm="syz.2.552" name="secretmem" dev="secretmem" ino=16448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.639271][ T1698] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 56.656992][ T1698] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2527804186 (323558935808 ns) > initial count (117850194176 ns). Using initial count to start timer. [ 56.678436][ T10] usb 1-1: USB disconnect, device number 14 [ 56.899983][ T36] audit: type=1400 audit(1786113070.920:391): avc: denied { getopt } for pid=1738 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.038590][ T1746] netlink: 'syz.2.558': attribute type 19 has an invalid length. [ 57.046377][ T1746] netlink: 'syz.2.558': attribute type 28 has an invalid length. [ 57.128567][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 57.186118][ T1767] cgroup: subsys name conflicts with all [ 57.201382][ T36] audit: type=1400 audit(1786113071.220:392): avc: denied { relabelfrom } for pid=1766 comm="syz.1.565" name="" dev="pipefs" ino=16579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 57.244536][ T1768] cgroup: Unknown subsys name ' ' [ 57.254215][ T1772] netlink: 'syz.0.566': attribute type 8 has an invalid length. [ 57.279584][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 8192, setting to 1024 [ 57.291623][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 57.303380][ T10] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 57.312535][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.320611][ T10] usb 3-1: Product: syz [ 57.324778][ T10] usb 3-1: Manufacturer: syz [ 57.328941][ T844] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 57.329592][ T10] usb 3-1: SerialNumber: syz [ 57.344420][ T10] ums-karma 3-1:1.0: USB Mass Storage device detected [ 57.354012][ T10] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 57.354012][ T10] Please send a copy of this message to and [ 57.406632][ T10] ums-karma 3-1:1.0: probe with driver ums-karma failed with error -5 [ 57.478454][ T844] usb 4-1: Using ep0 maxpacket: 16 [ 57.484873][ T844] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.495868][ T844] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.506279][ T844] usb 4-1: New USB device found, idVendor=0e41, idProduct=4242, bcdDevice= 0.40 [ 57.515398][ T844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.524867][ T844] usb 4-1: Product: syz [ 57.529071][ T844] usb 4-1: Manufacturer: syz [ 57.533701][ T844] usb 4-1: SerialNumber: syz [ 57.551116][ T31] usb 3-1: USB disconnect, device number 15 [ 57.668467][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 57.742155][ T844] usb 4-1: 0:1 : does not exist [ 57.748595][ T844] usb 4-1: unit 4 not found! [ 57.753669][ T844] usb 4-1: unit 8 not found! [ 57.758525][ T844] usb 4-1: unit 0 not found! [ 57.766205][ T844] usb 4-1: USB disconnect, device number 16 [ 57.788473][ T503] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 57.798557][ T10] usb 1-1: device descriptor read/64, error -71 [ 57.918478][ T503] usb 2-1: device descriptor read/64, error -71 [ 58.038467][ T10] usb 1-1: device descriptor read/64, error -71 [ 58.087340][ T1797] netlink: 96 bytes leftover after parsing attributes in process `syz.2.576'. [ 58.168481][ T503] usb 2-1: device descriptor read/64, error -71 [ 58.278579][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 58.296346][ T36] audit: type=1400 audit(1786113072.310:393): avc: denied { nlmsg_read } for pid=1800 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.337929][ T1805] cgroup: fork rejected by pids controller in /syz3 [ 58.408507][ T503] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 58.416225][ T10] usb 1-1: device descriptor read/64, error -71 [ 58.520567][ T13] bridge_slave_1: left allmulticast mode [ 58.526274][ T13] bridge_slave_1: left promiscuous mode [ 58.532137][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.539952][ T13] bridge_slave_0: left allmulticast mode [ 58.545614][ T13] bridge_slave_0: left promiscuous mode [ 58.551382][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.558478][ T503] usb 2-1: device descriptor read/64, error -71 [ 58.653104][ T1911] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.660221][ T1911] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.667376][ T1911] bridge_slave_0: entered allmulticast mode [ 58.673410][ T10] usb 1-1: device descriptor read/64, error -71 [ 58.680455][ T1911] bridge_slave_0: entered promiscuous mode [ 58.687784][ T13] veth1_macvtap: left promiscuous mode [ 58.693827][ T13] veth0_vlan: left promiscuous mode [ 58.751565][ T1911] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.758665][ T1911] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.765822][ T1911] bridge_slave_1: entered allmulticast mode [ 58.772266][ T1911] bridge_slave_1: entered promiscuous mode [ 58.788601][ T10] usb usb1-port1: attempt power cycle [ 58.808442][ T503] usb 2-1: device descriptor read/64, error -71 [ 58.853825][ T1911] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.860936][ T1911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.868282][ T1911] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.875377][ T1911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.902521][ T1332] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.910000][ T1332] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.919563][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.926655][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.928830][ T503] usb usb2-port1: attempt power cycle [ 58.940193][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.947255][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.974063][ T1911] veth0_vlan: entered promiscuous mode [ 58.985297][ T1911] veth1_macvtap: entered promiscuous mode [ 59.138686][ T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 59.159591][ T10] usb 1-1: device descriptor read/8, error -71 [ 59.288536][ T503] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 59.297398][ T10] usb 1-1: device descriptor read/8, error -71 [ 59.310177][ T503] usb 2-1: device descriptor read/8, error -71 [ 59.439780][ T503] usb 2-1: device descriptor read/8, error -71 [ 59.458600][ T844] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 59.538551][ T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 59.559585][ T10] usb 1-1: device descriptor read/8, error -71 [ 59.609732][ T844] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 59.619538][ T844] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 138, changing to 7 [ 59.630864][ T844] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 50750, setting to 1024 [ 59.643590][ T844] usb 4-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice=fd.40 [ 59.652741][ T844] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255 [ 59.661312][ T844] usb 4-1: Product: syz [ 59.665527][ T844] usb 4-1: Manufacturer: syz [ 59.670258][ T844] usb 4-1: SerialNumber: syz [ 59.678520][ T503] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 59.699904][ T503] usb 2-1: device descriptor read/8, error -71 [ 59.706181][ T10] usb 1-1: device descriptor read/8, error -71 [ 59.818755][ T10] usb usb1-port1: unable to enumerate USB device [ 59.829538][ T503] usb 2-1: device descriptor read/8, error -71 [ 59.881791][ T844] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 59.925925][ T844] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 59.938973][ T503] usb usb2-port1: unable to enumerate USB device [ 59.944918][ T844] usb 4-1: USB disconnect, device number 17 [ 59.961431][ T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.989542][ T1953] netlink: 96 bytes leftover after parsing attributes in process `syz.2.598'. [ 60.278482][ T503] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 60.439223][ T503] usb 3-1: Using ep0 maxpacket: 16 [ 60.451410][ T503] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 60.459890][ T503] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 60.470213][ T503] usb 3-1: config 0 has no interface number 0 [ 60.477861][ T503] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 60.487116][ T503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.495226][ T503] usb 3-1: Product: syz [ 60.501060][ T503] usb 3-1: Manufacturer: syz [ 60.505793][ T503] usb 3-1: SerialNumber: syz [ 60.518729][ T503] usb 3-1: config 0 descriptor?? [ 60.528795][ T503] usb 3-1: Found UVC 0.00 device syz (046d:08d3) [ 60.538741][ T503] usb 3-1: No valid video chain found. [ 60.732361][ T31] usb 3-1: USB disconnect, device number 16 [ 60.861077][ T1990] netlink: 96 bytes leftover after parsing attributes in process `syz.3.613'. [ 60.870402][ T1989] netlink: 96 bytes leftover after parsing attributes in process `syz.3.613'. [ 60.880926][ T36] kauditd_printk_skb: 11 callbacks suppressed [ 60.880946][ T36] audit: type=1401 audit(1786113074.900:405): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A7573626D6F6E5F6465766963655F743A7330000000000000000000000000000000000000000000000000000000002E2F66696C6530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002D000000000000004F000000000000000400000000000000004000000000000000000000000000000000000000000000000000000000000000100000000000002E0000000000000032EC756A0000000013C073340000000032EC756A0000000013C073340000000032EC756A0000000013C073340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073656375726974792E73656C696E757800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000 [ 60.906986][ T36] audit: type=1401 audit(1786113074.900:406): op=setxattr invalid_context=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 [ 60.948787][ T503] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 61.228454][ T311] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 61.259704][ T503] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 61.267907][ T503] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 61.278242][ T503] usb 2-1: config 0 has no interface number 0 [ 61.284413][ T503] usb 2-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 61.297517][ T503] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 61.307319][ T503] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.318786][ T503] usb 2-1: config 0 descriptor?? [ 61.388447][ T311] usb 4-1: Invalid ep0 maxpacket: 16 [ 61.478947][ T10] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 61.518450][ T311] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 61.544338][ T503] usb 2-1: USB disconnect, device number 19 [ 61.688465][ T311] usb 4-1: Invalid ep0 maxpacket: 16 [ 61.694033][ T311] usb usb4-port1: attempt power cycle [ 61.986656][ T36] audit: type=1400 audit(1786113076.000:407): avc: denied { create } for pid=2015 comm="syz.2.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 62.038488][ T311] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 62.075022][ T311] usb 4-1: Invalid ep0 maxpacket: 16 [ 62.218641][ T311] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 62.241798][ T311] usb 4-1: Invalid ep0 maxpacket: 16 [ 62.247558][ T311] usb usb4-port1: unable to enumerate USB device [ 62.420819][ T36] audit: type=1400 audit(1786113076.440:408): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 62.442208][ T2048] can0: slcan on ttyS3. [ 62.457374][ T36] audit: type=1400 audit(1786113076.470:409): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.495311][ T36] audit: type=1400 audit(1786113076.470:410): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=2942 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.516954][ T36] audit: type=1400 audit(1786113076.470:411): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2942 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.541624][ T2048] can0 (unregistered): slcan off ttyS3. [ 62.547366][ T36] audit: type=1400 audit(1786113076.470:412): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2942 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.573674][ T36] audit: type=1400 audit(1786113076.480:413): avc: denied { create } for pid=2051 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.597771][ T36] audit: type=1400 audit(1786113076.480:414): avc: denied { ioctl } for pid=2051 comm="syz.2.637" path="socket:[17902]" dev="sockfs" ino=17902 ioctlcmd=0xaa07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 62.678460][ T10] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 62.713916][ T311] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 62.736995][ T2070] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 62.839550][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 62.856624][ T10] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 62.869082][ T10] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.882029][ T311] usb 3-1: device descriptor read/64, error -71 [ 62.889460][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 62.896196][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 62.905615][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.919860][ T10] usb 1-1: config 0 descriptor?? [ 62.927621][ T2023] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 63.096791][ T2096] netlink: 'syz.1.642': attribute type 12 has an invalid length. [ 63.118426][ T311] usb 3-1: device descriptor read/64, error -71 [ 63.347418][ T10] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.354734][ T10] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.362295][ T10] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.369614][ T311] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 63.377436][ T10] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.385344][ T10] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.392847][ T10] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 63.400179][ T10] kovaplus 0003:1E7D:2D50.000A: item fetching failed at offset 32/40 [ 63.408760][ T10] kovaplus 0003:1E7D:2D50.000A: parse failed [ 63.414785][ T10] kovaplus 0003:1E7D:2D50.000A: probe with driver kovaplus failed with error -22 [ 63.448498][ T437] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 63.538617][ T311] usb 3-1: device descriptor read/64, error -71 [ 63.548701][ T10] usb 1-1: USB disconnect, device number 20 [ 63.598531][ T437] usb 2-1: Using ep0 maxpacket: 32 [ 63.605780][ T437] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 63.616042][ T437] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 63.625829][ T437] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.638918][ T437] usb 2-1: config 1 interface 0 has no altsetting 0 [ 63.647102][ T437] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.656263][ T437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.664460][ T437] usb 2-1: Product: 迈稹ꗰᝒ晤華밙酼汬秊뎯㊲隿퀹퇺ﾼ炚ỗ띭្療᩾됖 [ 63.675324][ T437] usb 2-1: Manufacturer: У [ 63.679969][ T437] usb 2-1: SerialNumber: చ [ 63.686297][ T2102] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 63.693540][ T2102] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 63.808467][ T311] usb 3-1: device descriptor read/64, error -71 [ 63.921747][ T311] usb usb3-port1: attempt power cycle [ 63.964539][ T437] usb 2-1: bad CDC descriptors [ 63.970971][ T437] usb 2-1: USB disconnect, device number 20 [ 64.258715][ T311] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 64.299428][ T311] usb 3-1: device descriptor read/8, error -71 [ 64.348473][ T407] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 64.429693][ T311] usb 3-1: device descriptor read/8, error -71 [ 64.478464][ T407] usb 4-1: device descriptor read/64, error -71 [ 64.567332][ T2129] netlink: 'syz.1.656': attribute type 8 has an invalid length. [ 64.679947][ T311] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 64.709388][ T311] usb 3-1: device descriptor read/8, error -71 [ 64.738433][ T407] usb 4-1: device descriptor read/64, error -71 [ 64.791849][ T2138] netlink: 16 bytes leftover after parsing attributes in process `syz.1.660'. [ 64.800867][ T2138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 64.809896][ T2138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 64.818974][ T2138] netlink: 128 bytes leftover after parsing attributes in process `syz.1.660'. [ 64.839731][ T311] usb 3-1: device descriptor read/8, error -71 [ 64.843948][ T2141] netlink: 96 bytes leftover after parsing attributes in process `syz.1.661'. [ 64.868443][ T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 64.958588][ T311] usb usb3-port1: unable to enumerate USB device [ 64.978569][ T407] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 65.019829][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 65.031169][ T10] usb 1-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 65.040322][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.048340][ T10] usb 1-1: Product: syz [ 65.052702][ T10] usb 1-1: Manufacturer: syz [ 65.057461][ T10] usb 1-1: SerialNumber: syz [ 65.108485][ T844] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 65.116177][ T407] usb 4-1: device descriptor read/64, error -71 [ 65.269602][ T844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.279823][ T844] usb 2-1: config 0 interface 0 altsetting 91 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 65.290972][ T844] usb 2-1: config 0 interface 0 altsetting 91 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.301275][ T844] usb 2-1: config 0 interface 0 altsetting 91 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 65.314495][ T844] usb 2-1: config 0 interface 0 has no altsetting 0 [ 65.321951][ T844] usb 2-1: New USB device found, idVendor=0404, idProduct=c294, bcdDevice= 0.00 [ 65.328484][ T2144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.332605][ T844] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 65.342623][ T2144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.348747][ T844] usb 2-1: Manufacturer: syz [ 65.363984][ T844] usb 2-1: config 0 descriptor?? [ 65.364497][ T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 65.369041][ T407] usb 4-1: device descriptor read/64, error -71 [ 65.381316][ T10] usb 1-1: unit 5 not found! [ 65.394622][ T10] usb 1-1: USB disconnect, device number 21 [ 65.407502][ T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 65.488588][ T407] usb usb4-port1: attempt power cycle [ 65.586178][ T844] usb 2-1: USB disconnect, device number 21 [ 65.828517][ T407] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 65.849659][ T407] usb 4-1: device descriptor read/8, error -71 [ 65.989777][ T407] usb 4-1: device descriptor read/8, error -71 [ 66.126071][ T36] kauditd_printk_skb: 30 callbacks suppressed [ 66.126091][ T36] audit: type=1400 audit(1786113080.140:445): avc: denied { accept } for pid=2169 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.151801][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 66.248746][ T407] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 66.269624][ T407] usb 4-1: device descriptor read/8, error -71 [ 66.309648][ T10] usb 1-1: config index 0 descriptor too short (expected 1372, got 92) [ 66.318041][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.329578][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.338683][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.346690][ T10] usb 1-1: Product: syz [ 66.350991][ T10] usb 1-1: Manufacturer: syz [ 66.355675][ T10] usb 1-1: SerialNumber: syz [ 66.388610][ T844] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 66.399651][ T407] usb 4-1: device descriptor read/8, error -71 [ 66.508942][ T407] usb usb4-port1: unable to enumerate USB device [ 66.539592][ T844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.550932][ T844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.561865][ T844] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 66.573080][ T844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.588682][ T844] usb 2-1: config 0 descriptor?? [ 67.014188][ T36] audit: type=1326 audit(1786113081.030:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.3.649" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f5cd9e0d9 code=0x7fc00000 [ 67.197281][ T844] usb 2-1: language id specifier not provided by device, defaulting to English [ 67.374786][ T2166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.383729][ T2166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.438431][ T65] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 67.589538][ T65] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 67.599852][ T844] uclogic 0003:256C:006D.000B: failed retrieving Huion firmware version: -71 [ 67.608366][ T10] cdc_ncm 1-1:1.0: bind() failure [ 67.609853][ T844] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 67.621578][ T844] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 67.631112][ T65] usb 4-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 67.640608][ T65] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.643895][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 67.652085][ T844] usb 2-1: USB disconnect, device number 22 [ 67.662068][ T10] cdc_ncm 1-1:1.1: bind() failure [ 67.662221][ T65] usb 4-1: Product: syz [ 67.671633][ T65] usb 4-1: Manufacturer: syz [ 67.676264][ T65] usb 4-1: SerialNumber: syz [ 67.681040][ T10] usb 1-1: USB disconnect, device number 22 [ 67.949540][ T2184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.958518][ T2184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.970868][ T65] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 67.977842][ T65] usb 4-1: unit 5 not found! [ 67.986314][ T65] usb 4-1: USB disconnect, device number 26 [ 67.999962][ T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.082286][ T2190] netlink: 96 bytes leftover after parsing attributes in process `syz.2.681'. [ 68.101578][ T36] audit: type=1400 audit(1786113082.120:447): avc: denied { write } for pid=2191 comm="syz.2.682" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 68.125757][ T36] audit: type=1400 audit(1786113082.120:448): avc: denied { open } for pid=2191 comm="syz.2.682" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 68.171514][ T2195] netlink: 'syz.1.684': attribute type 8 has an invalid length. [ 68.269158][ T36] audit: type=1400 audit(1786113082.290:449): avc: denied { ioctl } for pid=2205 comm="syz.1.688" path="socket:[19002]" dev="sockfs" ino=19002 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.404025][ T2216] input: syz0 as /devices/virtual/input/input9 [ 68.542889][ T2222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.694'. [ 68.608429][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 68.668455][ T65] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 68.695038][ T2233] netlink: 'syz.0.695': attribute type 8 has an invalid length. [ 68.778513][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 68.785033][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.795296][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.805618][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.814767][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.822864][ T10] usb 2-1: Product: syz [ 68.825095][ T65] usb 3-1: Using ep0 maxpacket: 8 [ 68.827367][ T10] usb 2-1: Manufacturer: syz [ 68.837110][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 68.848279][ T10] usb 2-1: SerialNumber: syz [ 68.855818][ T65] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 68.881943][ T65] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 68.892408][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.900566][ T36] audit: type=1400 audit(1786113082.910:450): avc: denied { map } for pid=2242 comm="syz.0.699" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.926491][ T65] usb 3-1: Product: syz [ 68.930764][ T65] usb 3-1: Manufacturer: syz [ 68.935399][ T65] usb 3-1: SerialNumber: syz [ 69.069340][ T10] usb 2-1: 0:2 : does not exist [ 69.080976][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 69.100620][ T10] usb 2-1: USB disconnect, device number 23 [ 69.153159][ T65] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 69.164068][ T65] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 69.174310][ T65] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 69.184529][ T65] usb 3-1: USB disconnect, device number 21 [ 69.190857][ T407] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 69.349653][ T407] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.361033][ T407] usb 1-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 69.370338][ T407] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.378477][ T407] usb 1-1: Product: syz [ 69.382753][ T407] usb 1-1: Manufacturer: syz [ 69.387368][ T407] usb 1-1: SerialNumber: syz [ 69.548576][ T844] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 69.648625][ T2248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.657224][ T2248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.669682][ T407] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 69.676665][ T407] usb 1-1: unit 5 not found! [ 69.681414][ T844] usb 4-1: device descriptor read/64, error -71 [ 69.692539][ T407] usb 1-1: USB disconnect, device number 23 [ 69.712180][ T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 69.734244][ T2262] netlink: 'syz.2.706': attribute type 8 has an invalid length. [ 69.838468][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 69.928486][ T844] usb 4-1: device descriptor read/64, error -71 [ 69.978479][ T10] usb 2-1: device descriptor read/64, error -71 [ 70.091666][ T36] audit: type=1400 audit(1786113084.110:451): avc: denied { mount } for pid=2285 comm="syz.2.717" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.113692][ T36] audit: type=1400 audit(1786113084.110:452): avc: denied { read write } for pid=2285 comm="syz.2.717" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 70.137233][ T36] audit: type=1400 audit(1786113084.110:453): avc: denied { open } for pid=2285 comm="syz.2.717" path="/212/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 70.161036][ T36] audit: type=1400 audit(1786113084.110:454): avc: denied { ioctl } for pid=2285 comm="syz.2.717" path="/212/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 70.188538][ T844] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 70.218453][ T10] usb 2-1: device descriptor read/64, error -71 [ 70.318483][ T844] usb 4-1: device descriptor read/64, error -71 [ 70.458466][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 70.558488][ T844] usb 4-1: device descriptor read/64, error -71 [ 70.588499][ T10] usb 2-1: device descriptor read/64, error -71 [ 70.628477][ T65] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 70.676937][ T844] usb usb4-port1: attempt power cycle [ 70.779760][ T65] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 70.791104][ T65] usb 1-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 70.800229][ T65] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.808272][ T65] usb 1-1: Product: syz [ 70.812504][ T65] usb 1-1: Manufacturer: syz [ 70.817122][ T65] usb 1-1: SerialNumber: syz [ 70.828670][ T10] usb 2-1: device descriptor read/64, error -71 [ 70.938572][ T10] usb usb2-port1: attempt power cycle [ 71.018458][ T844] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 71.039411][ T844] usb 4-1: device descriptor read/8, error -71 [ 71.090531][ T65] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 71.097651][ T65] usb 1-1: unit 5 not found! [ 71.115907][ T65] usb 1-1: USB disconnect, device number 24 [ 71.138290][ T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.171927][ T844] usb 4-1: device descriptor read/8, error -71 [ 71.278533][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 71.300546][ T10] usb 2-1: device descriptor read/8, error -71 [ 71.408475][ T844] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 71.429577][ T844] usb 4-1: device descriptor read/8, error -71 [ 71.429577][ T10] usb 2-1: device descriptor read/8, error -71 [ 71.569552][ T844] usb 4-1: device descriptor read/8, error -71 [ 71.678609][ T844] usb usb4-port1: unable to enumerate USB device [ 71.688437][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 71.729951][ T10] usb 2-1: device descriptor read/8, error -71 [ 71.736729][ T2375] netlink: 5 bytes leftover after parsing attributes in process `syz.2.740'. [ 71.746376][ T2375] loop7: detected capacity change from 0 to 7 [ 71.754245][ C0] blk_print_req_error: 1 callbacks suppressed [ 71.754262][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.770318][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.779506][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.788406][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.797576][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.806503][ T2375] loop7: unable to read partition table [ 71.814190][ T2375] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 71.827739][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.827775][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.845893][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.855100][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.863625][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.872822][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.881447][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.890684][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.905319][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.915204][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 71.924398][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 71.932345][ T10] usb 2-1: device descriptor read/8, error -71 [ 72.048636][ T10] usb usb2-port1: unable to enumerate USB device [ 72.198470][ T437] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 72.351546][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 72.351567][ T36] audit: type=1400 audit(1786113086.370:458): avc: denied { shutdown } for pid=2412 comm="syz.3.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.379640][ T437] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.396169][ T437] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 72.405657][ T437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.413832][ T437] usb 3-1: Product: syz [ 72.418076][ T437] usb 3-1: Manufacturer: syz [ 72.422785][ T437] usb 3-1: SerialNumber: syz [ 72.528623][ T65] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 72.563686][ T2421] netlink: 104 bytes leftover after parsing attributes in process `syz.3.760'. [ 72.650969][ T2425] FAULT_INJECTION: forcing a failure. [ 72.650969][ T2425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.664276][ T2425] CPU: 1 UID: 0 PID: 2425 Comm: syz.1.761 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 72.664309][ T2425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.664337][ T2425] Call Trace: [ 72.664345][ T2425] [ 72.664354][ T2425] __dump_stack+0x21/0x30 [ 72.664390][ T2425] dump_stack_lvl+0x140/0x1c0 [ 72.664424][ T2425] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.664448][ T2425] ? is_bpf_text_address+0x17b/0x1a0 [ 72.664491][ T2425] ? kernel_text_address+0xa9/0xe0 [ 72.664524][ T2425] dump_stack+0x19/0x20 [ 72.664552][ T2425] should_fail_ex+0x3c2/0x510 [ 72.664579][ T2425] should_fail+0xf/0x20 [ 72.664596][ T2425] should_fail_usercopy+0x1e/0x30 [ 72.664615][ T2425] _copy_from_user+0x20/0xa0 [ 72.664656][ T2425] ___sys_sendmsg+0x1c7/0x370 [ 72.664680][ T2425] ? __sys_sendmsg+0x2a0/0x2a0 [ 72.664703][ T2425] ? kstrtouint+0x78/0xf0 [ 72.664731][ T2425] ? __fget_files+0x2bc/0x330 [ 72.664751][ T2425] __sys_sendmmsg+0x2b4/0x4e0 [ 72.664769][ T2425] ? __cfi___sys_sendmmsg+0x10/0x10 [ 72.664809][ T2425] ? __cfi_ksys_write+0x10/0x10 [ 72.664834][ T2425] __x64_sys_sendmmsg+0xa4/0xc0 [ 72.664857][ T2425] x64_sys_call+0xfec/0x2ee0 [ 72.664880][ T2425] do_syscall_64+0x57/0xf0 [ 72.664897][ T2425] ? clear_bhb_loop+0x50/0xa0 [ 72.664920][ T2425] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.664971][ T2425] RIP: 0033:0x7fe5d859e0d9 [ 72.664989][ T2425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.665011][ T2425] RSP: 002b:00007fe5d94d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 72.665033][ T2425] RAX: ffffffffffffffda RBX: 00007fe5d8825fa0 RCX: 00007fe5d859e0d9 [ 72.665046][ T2425] RDX: 0000000000000001 RSI: 0000200000003600 RDI: 0000000000000003 [ 72.665056][ T2425] RBP: 00007fe5d94d2090 R08: 0000000000000000 R09: 0000000000000000 [ 72.665066][ T2425] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 72.665093][ T2425] R13: 00007fe5d8826038 R14: 00007fe5d8825fa0 R15: 00007ffd192964f8 [ 72.665114][ T2425] [ 72.877583][ T65] usb 1-1: Using ep0 maxpacket: 8 [ 72.888288][ T437] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 72.895902][ T65] usb 1-1: config 0 interface 0 has no altsetting 0 [ 72.899249][ T437] usb 3-1: unit 5 not found! [ 72.902838][ T65] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 72.916241][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.924803][ T437] usb 3-1: USB disconnect, device number 22 [ 72.930883][ T311] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 72.939025][ T65] usb 1-1: config 0 descriptor?? [ 72.951524][ T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 72.998163][ T2430] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.069447][ T311] usb 4-1: device descriptor read/64, error -71 [ 73.308436][ T311] usb 4-1: device descriptor read/64, error -71 [ 73.345216][ T65] hid (null): invalid report_count 2060869942 [ 73.352969][ T65] logitech-djreceiver 0003:046D:C534.000C: unknown main item tag 0x4 [ 73.361163][ T65] logitech-djreceiver 0003:046D:C534.000C: unexpected long global item [ 73.369707][ T65] logitech-djreceiver 0003:046D:C534.000C: logi_dj_probe: parse failed [ 73.378126][ T65] logitech-djreceiver 0003:046D:C534.000C: probe with driver logitech-djreceiver failed with error -22 [ 73.548034][ T2409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.557597][ T2409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.568465][ T311] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 73.578458][ T437] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 73.698451][ T311] usb 4-1: device descriptor read/64, error -71 [ 73.749905][ T437] usb 2-1: unable to get BOS descriptor or descriptor too short [ 73.758457][ T437] usb 2-1: config 1 interface 0 altsetting 129 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 73.769612][ T437] usb 2-1: config 1 interface 0 has no altsetting 0 [ 73.778164][ T437] usb 2-1: string descriptor 0 read error: -22 [ 73.784907][ T437] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 73.794065][ T437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.800865][ T2467] FAULT_INJECTION: forcing a failure. [ 73.800865][ T2467] name failslab, interval 1, probability 0, space 0, times 0 [ 73.805109][ T2444] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 73.827954][ T2467] CPU: 1 UID: 0 PID: 2467 Comm: syz.2.775 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 73.827992][ T2467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 73.828006][ T2467] Call Trace: [ 73.828014][ T2467] [ 73.828022][ T2467] __dump_stack+0x21/0x30 [ 73.828057][ T2467] dump_stack_lvl+0x140/0x1c0 [ 73.828080][ T2467] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.828124][ T2467] dump_stack+0x19/0x20 [ 73.828153][ T2467] should_fail_ex+0x3c2/0x510 [ 73.828192][ T2467] should_failslab+0xac/0x100 [ 73.828211][ T2467] kmem_cache_alloc_node_noprof+0x45/0x420 [ 73.828229][ T2467] ? __alloc_skb+0x10c/0x360 [ 73.828267][ T2467] ? fib6_rule_lookup+0x38b/0x6d0 [ 73.828295][ T2467] __alloc_skb+0x10c/0x360 [ 73.828327][ T2467] __ip6_append_data+0x2a78/0x3bf0 [ 73.828354][ T2467] ? arch_stack_walk+0x10a/0x170 [ 73.828390][ T2467] ? __asan_memset+0x39/0x50 [ 73.828413][ T2467] ? __cfi_raw6_getfrag+0x10/0x10 [ 73.828444][ T2467] ? __kasan_check_write+0x18/0x20 [ 73.828464][ T2467] ? _raw_spin_lock_bh+0x96/0x130 [ 73.828491][ T2467] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 73.828517][ T2467] ? ip6_setup_cork+0x13a0/0x13a0 [ 73.828550][ T2467] ? ip6_append_data+0x23e/0x370 [ 73.828597][ T2467] ip6_append_data+0x194/0x370 [ 73.828628][ T2467] ? __cfi_raw6_getfrag+0x10/0x10 [ 73.828665][ T2467] rawv6_sendmsg+0x1240/0x1820 [ 73.828690][ T2467] ? __cfi_avc_has_perm+0x10/0x10 [ 73.828708][ T2467] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 73.828751][ T2467] ? selinux_socket_sendmsg+0x281/0x380 [ 73.828783][ T2467] ? inet_send_prepare+0x64/0x4e0 [ 73.828821][ T2467] ? __cfi_rawv6_sendmsg+0x10/0x10 [ 73.828844][ T2467] inet_sendmsg+0x116/0x120 [ 73.828862][ T2467] ____sys_sendmsg+0x822/0xa00 [ 73.828926][ T2467] ? __import_iovec+0x3fa/0x7d0 [ 73.828963][ T2467] ? __sys_sendmsg_sock+0x50/0x50 [ 73.828979][ T2467] ? unwind_get_return_address+0x51/0x90 [ 73.829001][ T2467] ? import_iovec+0x80/0xb0 [ 73.829047][ T2467] ___sys_sendmsg+0x2a6/0x370 [ 73.829070][ T2467] ? __sys_sendmsg+0x2a0/0x2a0 [ 73.829093][ T2467] ? kstrtouint+0x78/0xf0 [ 73.829125][ T2467] ? __fget_files+0x2bc/0x330 [ 73.829153][ T2467] __sys_sendmmsg+0x2b4/0x4e0 [ 73.829171][ T2467] ? __cfi___sys_sendmmsg+0x10/0x10 [ 73.829215][ T2467] ? __cfi_ksys_write+0x10/0x10 [ 73.829239][ T2467] __x64_sys_sendmmsg+0xa4/0xc0 [ 73.829268][ T2467] x64_sys_call+0xfec/0x2ee0 [ 73.829284][ T2467] do_syscall_64+0x57/0xf0 [ 73.829301][ T2467] ? clear_bhb_loop+0x50/0xa0 [ 73.829342][ T2467] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.829372][ T2467] RIP: 0033:0x7f97c439e0d9 [ 73.829391][ T2467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.829417][ T2467] RSP: 002b:00007f97c5327028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 73.829435][ T2467] RAX: ffffffffffffffda RBX: 00007f97c4625fa0 RCX: 00007f97c439e0d9 [ 73.829447][ T2467] RDX: 0000000000000001 RSI: 0000200000003600 RDI: 0000000000000003 [ 73.829458][ T2467] RBP: 00007f97c5327090 R08: 0000000000000000 R09: 0000000000000000 [ 73.829468][ T2467] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 73.829495][ T2467] R13: 00007f97c4626038 R14: 00007f97c4625fa0 R15: 00007ffefef29e68 [ 73.829516][ T2467] [ 73.948736][ T311] usb 4-1: device descriptor read/64, error -71 [ 74.163441][ T437] usbhid 2-1:1.0: can't add hid device: -71 [ 74.169508][ T437] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 74.178346][ T437] usb 2-1: USB disconnect, device number 28 [ 74.268582][ T311] usb usb4-port1: attempt power cycle [ 74.458491][ T407] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 74.608463][ T311] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 74.610245][ T407] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 74.627163][ T407] usb 3-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 74.636285][ T407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.640112][ T311] usb 4-1: device descriptor read/8, error -71 [ 74.644466][ T407] usb 3-1: Product: syz [ 74.654658][ T407] usb 3-1: Manufacturer: syz [ 74.659553][ T407] usb 3-1: SerialNumber: syz [ 74.688349][ T36] audit: type=1400 audit(1786113088.700:459): avc: denied { create } for pid=2473 comm="syz.1.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 74.779626][ T311] usb 4-1: device descriptor read/8, error -71 [ 74.872178][ T407] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 74.879170][ T407] usb 3-1: unit 5 not found! [ 74.887926][ T407] usb 3-1: USB disconnect, device number 23 [ 74.902521][ T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.938470][ T437] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 75.018527][ T311] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 75.039661][ T311] usb 4-1: device descriptor read/8, error -71 [ 75.088481][ T437] usb 2-1: Using ep0 maxpacket: 16 [ 75.094800][ T437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 75.106134][ T437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9163, setting to 1024 [ 75.117264][ T437] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 75.126391][ T437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.134985][ T437] usb 2-1: config 0 descriptor?? [ 75.169691][ T311] usb 4-1: device descriptor read/8, error -71 [ 75.278612][ T311] usb usb4-port1: unable to enumerate USB device [ 75.390516][ T2480] netlink: 'syz.2.779': attribute type 8 has an invalid length. [ 75.542361][ T437] usbhid 2-1:0.0: can't add hid device: -71 [ 75.548460][ T437] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 75.557201][ T437] usb 2-1: USB disconnect, device number 29 [ 76.118590][ T844] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 76.269776][ T844] usb 4-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 76.281072][ T844] usb 4-1: config 0 interface 0 has no altsetting 0 [ 76.287853][ T844] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 76.297147][ T844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.306323][ T844] usb 4-1: config 0 descriptor?? [ 76.318433][ T437] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 76.479645][ T437] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 76.490964][ T437] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 76.500121][ T437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.508217][ T437] usb 2-1: Product: syz [ 76.512484][ T437] usb 2-1: Manufacturer: syz [ 76.517119][ T437] usb 2-1: SerialNumber: syz [ 76.678497][ T504] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 76.717520][ T844] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0 [ 76.724817][ T844] zeroplus 0003:0C12:0030.000D: unknown main item tag 0x0 [ 76.732054][ T844] zeroplus 0003:0C12:0030.000D: unexpected long global item [ 76.739742][ T844] zeroplus 0003:0C12:0030.000D: parse failed [ 76.745810][ T844] zeroplus 0003:0C12:0030.000D: probe with driver zeroplus failed with error -22 [ 76.838457][ T504] usb 3-1: Using ep0 maxpacket: 32 [ 76.844895][ T504] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.856155][ T504] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 76.866053][ T504] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 76.875955][ T504] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 76.889807][ T504] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.899284][ T504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 76.907337][ T504] usb 3-1: SerialNumber: syz [ 76.913100][ T2507] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 76.920617][ T2507] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 76.928767][ T504] hub 3-1:1.0: bad descriptor, ignoring hub [ 76.934865][ T504] hub 3-1:1.0: probe with driver hub failed with error -5 [ 76.942231][ T504] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 76.953345][ T844] usb 4-1: USB disconnect, device number 35 [ 77.968487][ T10] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 78.148501][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 78.155433][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 78.164447][ T10] usb 4-1: config 3 has an invalid interface number: 105 but max is 1 [ 78.173048][ T10] usb 4-1: config 3 has an invalid interface number: 164 but max is 1 [ 78.181756][ T10] usb 4-1: config 3 has no interface number 0 [ 78.187989][ T10] usb 4-1: config 3 has no interface number 1 [ 78.194516][ T10] usb 4-1: config 3 interface 105 has no altsetting 0 [ 78.201558][ T10] usb 4-1: config 3 interface 164 has no altsetting 0 [ 78.210410][ T10] usb 4-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=4c.06 [ 78.219859][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.228031][ T10] usb 4-1: Product: syz [ 78.232643][ T10] usb 4-1: Manufacturer: syz [ 78.237363][ T10] usb 4-1: SerialNumber: syz [ 78.455863][ T10] uvcvideo 4-1:3.164: Found multiple Units with ID 5 [ 78.463206][ T10] uvcvideo 4-1:3.164: Found multiple Units with ID 1 [ 78.470852][ T10] usb 4-1: Found UVC 0.03 device syz (04c8:0720) [ 78.477585][ T10] uvcvideo 4-1:3.164: Entity type for entity Output 65535 was not initialized! [ 78.487017][ T10] uvcvideo 4-1:3.164: Entity type for entity Input 65535 was not initialized! [ 78.496207][ T10] usb 4-1: Failed to create links for entity 65535 [ 78.503105][ T10] usb 4-1: Failed to register entities (-22). [ 78.513415][ T10] usb 4-1: USB disconnect, device number 36 [ 79.102033][ T437] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 79.115706][ T437] usb 2-1: unit 5 not found! [ 79.142425][ T437] usb 2-1: USB disconnect, device number 30 [ 79.171850][ T633] udevd[633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 79.439850][ T2532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'. [ 79.454741][ T2534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'. [ 79.485152][ T504] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 79.524282][ T504] usb 3-1: USB disconnect, device number 24 [ 79.556505][ T2544] netlink: 96 bytes leftover after parsing attributes in process `syz.3.802'. [ 79.695273][ T36] audit: type=1400 audit(1786113093.710:460): avc: denied { mounton } for pid=2552 comm="syz.1.805" path="/186/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 79.916942][ T36] audit: type=1400 audit(1786113093.930:461): avc: denied { ioctl } for pid=2570 comm="syz.3.813" path="socket:[22807]" dev="sockfs" ino=22807 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 79.968465][ T36] audit: type=1400 audit(1786113093.960:462): avc: denied { setopt } for pid=2570 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.992514][ T36] audit: type=1400 audit(1786113093.960:463): avc: denied { getopt } for pid=2570 comm="syz.3.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.016368][ T2577] FAULT_INJECTION: forcing a failure. [ 80.016368][ T2577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.032796][ T2577] CPU: 1 UID: 0 PID: 2577 Comm: syz.3.816 Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 80.032833][ T2577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.032848][ T2577] Call Trace: [ 80.032855][ T2577] [ 80.032863][ T2577] __dump_stack+0x21/0x30 [ 80.032909][ T2577] dump_stack_lvl+0x140/0x1c0 [ 80.032940][ T2577] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.032972][ T2577] ? check_stack_object+0x138/0x150 [ 80.032997][ T2577] dump_stack+0x19/0x20 [ 80.033027][ T2577] should_fail_ex+0x3c2/0x510 [ 80.033053][ T2577] should_fail+0xf/0x20 [ 80.033076][ T2577] should_fail_usercopy+0x1e/0x30 [ 80.033103][ T2577] _copy_to_user+0x24/0xa0 [ 80.033134][ T2577] simple_read_from_buffer+0xed/0x160 [ 80.033166][ T2577] proc_fail_nth_read+0x1aa/0x220 [ 80.033199][ T2577] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 80.033232][ T2577] ? bpf_lsm_file_permission+0xd/0x20 [ 80.033262][ T2577] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 80.033294][ T2577] vfs_read+0x288/0xc70 [ 80.033317][ T2577] ? __cfi_vfs_read+0x10/0x10 [ 80.033339][ T2577] ? __kasan_check_write+0x18/0x20 [ 80.033361][ T2577] ? mutex_lock+0x97/0x1d0 [ 80.033393][ T2577] ? __cfi_mutex_lock+0x10/0x10 [ 80.033426][ T2577] ksys_read+0x145/0x260 [ 80.033448][ T2577] ? __cfi_ksys_read+0x10/0x10 [ 80.033472][ T2577] ? __kasan_check_read+0x15/0x20 [ 80.033494][ T2577] __x64_sys_read+0x7f/0x90 [ 80.033517][ T2577] x64_sys_call+0x2638/0x2ee0 [ 80.033537][ T2577] do_syscall_64+0x57/0xf0 [ 80.033563][ T2577] ? clear_bhb_loop+0x50/0xa0 [ 80.033593][ T2577] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.033622][ T2577] RIP: 0033:0x7f6f5cd5e90e [ 80.033641][ T2577] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 80.033660][ T2577] RSP: 002b:00007f6f5b7f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 80.033684][ T2577] RAX: ffffffffffffffda RBX: 00007f6f5b7f76c0 RCX: 00007f6f5cd5e90e [ 80.033701][ T2577] RDX: 000000000000000f RSI: 00007f6f5b7f70a0 RDI: 0000000000000004 [ 80.033716][ T2577] RBP: 00007f6f5b7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.033731][ T2577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.033745][ T2577] R13: 00007f6f5d026038 R14: 00007f6f5d025fa0 R15: 00007ffd9f869048 [ 80.033764][ T2577] [ 80.351577][ T2585] netlink: 96 bytes leftover after parsing attributes in process `syz.1.821'. [ 80.698490][ T311] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 80.848463][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 80.854963][ T311] usb 2-1: config 59 has an invalid interface number: 94 but max is 0 [ 80.863440][ T311] usb 2-1: config 59 has no interface number 0 [ 80.869802][ T311] usb 2-1: config 59 interface 94 altsetting 80 endpoint 0xF has an invalid bInterval 121, changing to 7 [ 80.881260][ T311] usb 2-1: config 59 interface 94 altsetting 80 bulk endpoint 0x4 has invalid maxpacket 1024 [ 80.891692][ T311] usb 2-1: config 59 interface 94 altsetting 80 endpoint 0x2 has invalid maxpacket 503, setting to 64 [ 80.903034][ T311] usb 2-1: config 59 interface 94 altsetting 80 has a duplicate endpoint with address 0x2, skipping [ 80.914092][ T311] usb 2-1: config 59 interface 94 altsetting 80 has an invalid descriptor for endpoint zero, skipping [ 80.925156][ T311] usb 2-1: config 59 interface 94 altsetting 80 endpoint 0x8 has invalid wMaxPacketSize 0 [ 80.935204][ T311] usb 2-1: config 59 interface 94 altsetting 80 has a duplicate endpoint with address 0xA, skipping [ 80.946092][ T311] usb 2-1: config 59 interface 94 altsetting 80 has a duplicate endpoint with address 0x2, skipping [ 80.956950][ T311] usb 2-1: config 59 interface 94 has no altsetting 0 [ 80.965114][ T311] usb 2-1: New USB device found, idVendor=10b9, idProduct=5000, bcdDevice=86.0b [ 80.974244][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.982338][ T311] usb 2-1: Product: ѕ [ 80.986456][ T311] usb 2-1: Manufacturer: 黴벷볙ৎῌﯬઉ氪幥蕚鋟日 [ 80.995363][ T311] usb 2-1: SerialNumber:   [ 81.001057][ T2597] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 81.618482][ T407] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 81.769617][ T407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.785504][ T407] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.794659][ T407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.804043][ T407] usb 4-1: config 0 descriptor?? [ 82.014210][ T407] usbhid 4-1:0.0: can't add hid device: -71 [ 82.020344][ T407] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 82.029101][ T407] usb 4-1: USB disconnect, device number 37 [ 82.448501][ T407] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 82.599606][ T407] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.610707][ T407] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 82.619813][ T407] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.628779][ T407] usb 4-1: config 0 descriptor?? [ 83.438882][ T407] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 83.455387][ T407] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 83.463442][ T311] usb 2-1: USB disconnect, device number 31 [ 83.484224][ C1] ------------[ cut here ]------------ [ 83.489737][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 83.498345][ C1] index 26763 is out of range for type 'const int[34]' [ 83.505251][ C1] CPU: 1 UID: 0 PID: 633 Comm: udevd Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 83.505296][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.505314][ C1] Call Trace: [ 83.505323][ C1] [ 83.505333][ C1] __dump_stack+0x21/0x30 [ 83.505378][ C1] dump_stack_lvl+0x140/0x1c0 [ 83.505427][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.505463][ C1] ? vfs_fstatat+0xe5/0x1d0 [ 83.505494][ C1] ? do_syscall_64+0x57/0xf0 [ 83.505526][ C1] dump_stack+0x19/0x20 [ 83.505559][ C1] ubsan_epilogue+0xe/0x40 [ 83.505586][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 83.505624][ C1] aiptek_irq+0x208d/0x2a00 [ 83.505658][ C1] ? _raw_spin_unlock+0x45/0x60 [ 83.505688][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 83.505716][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 83.505757][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 83.505794][ C1] dummy_timer+0xa3f/0x4900 [ 83.505829][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 83.505853][ C1] ? timerqueue_del+0xd7/0x130 [ 83.505877][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 83.505915][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 83.505938][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 83.505979][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 83.506015][ C1] ? read_tsc+0xd/0x20 [ 83.506049][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 83.506082][ C1] hrtimer_run_softirq+0x159/0x560 [ 83.506105][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 83.506141][ C1] handle_softirqs+0x1aa/0x620 [ 83.506169][ C1] __irq_exit_rcu+0x47/0xb0 [ 83.506197][ C1] irq_exit_rcu+0xd/0x30 [ 83.506220][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 83.506258][ C1] [ 83.506266][ C1] [ 83.506275][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 83.506311][ C1] RIP: 0010:set_nlink+0x40/0x1a0 [ 83.506344][ C1] Code: fe 49 bc 00 00 00 00 00 fc ff df e8 5a 4a 95 ff 31 ff 44 89 fe e8 90 4e 95 ff 4d 8d 6e 48 4c 89 eb 48 c1 eb 03 42 0f b6 04 23 <84> c0 0f 85 fa 00 00 00 45 8b 65 00 31 ff 44 89 e6 e8 6a 4e 95 ff [ 83.506368][ C1] RSP: 0018:ffffc9000e8cf770 EFLAGS: 00000a06 [ 83.506394][ C1] RAX: 0000000000000000 RBX: 1ffff11022461481 RCX: 0000000000000000 [ 83.506422][ C1] RDX: ffff88811dfccc00 RSI: 0000000000000005 RDI: 0000000000000000 [ 83.506439][ C1] RBP: ffffc9000e8cf798 R08: ffff8881016520af R09: 1ffff110202ca415 [ 83.506460][ C1] R10: dffffc0000000000 R11: ffffed10202ca416 R12: dffffc0000000000 [ 83.506480][ C1] R13: ffff88811230a408 R14: ffff88811230a3c0 R15: 0000000000000005 [ 83.506503][ C1] kernfs_iop_permission+0x3d4/0x590 [ 83.506537][ C1] ? __cfi_kernfs_iop_permission+0x10/0x10 [ 83.506569][ C1] inode_permission+0x250/0x4c0 [ 83.506599][ C1] link_path_walk+0x22d/0xeb0 [ 83.506627][ C1] path_lookupat+0x8d/0x440 [ 83.506656][ C1] filename_lookup+0x22d/0x5a0 [ 83.506695][ C1] ? __cfi_filename_lookup+0x10/0x10 [ 83.506730][ C1] ? __cfi___check_object_size+0x10/0x10 [ 83.506758][ C1] ? kasan_save_alloc_info+0x3a/0x50 [ 83.506800][ C1] vfs_statx+0x106/0x210 [ 83.506830][ C1] ? vfs_fstatat+0x1d0/0x1d0 [ 83.506860][ C1] ? getname_flags+0x203/0x6b0 [ 83.506889][ C1] vfs_fstatat+0xe5/0x1d0 [ 83.506918][ C1] __se_sys_newfstatat+0x127/0x3c0 [ 83.506950][ C1] ? __x64_sys_newfstatat+0xc0/0xc0 [ 83.506984][ C1] ? call_rcu_hurry+0x30/0x30 [ 83.507019][ C1] __x64_sys_newfstatat+0x9f/0xc0 [ 83.507052][ C1] x64_sys_call+0x1821/0x2ee0 [ 83.507075][ C1] do_syscall_64+0x57/0xf0 [ 83.507102][ C1] ? clear_bhb_loop+0x50/0xa0 [ 83.507136][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.507168][ C1] RIP: 0033:0x7f4f66911b0a [ 83.507187][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 83.507206][ C1] RSP: 002b:00007fffa5e8b218 EFLAGS: 00000202 ORIG_RAX: 0000000000000106 [ 83.507229][ C1] RAX: ffffffffffffffda RBX: 00005573493b5024 RCX: 00007f4f66911b0a [ 83.507250][ C1] RDX: 00007fffa5e8b220 RSI: 00007fffa5e8b2b0 RDI: 00000000ffffff9c [ 83.507268][ C1] RBP: 0000557355ed3d40 R08: 00005573493b5024 R09: 0000000000000000 [ 83.507286][ C1] R10: 0000000000000100 R11: 0000000000000202 R12: 0000557355ed3e30 [ 83.507303][ C1] R13: 00007fffa5e8b2b0 R14: 00007fffa5e8d3f0 R15: 00005573493bbbcc [ 83.507326][ C1] [ 83.507335][ C1] ---[ end trace ]--- [ 83.937663][ C1] ------------[ cut here ]------------ [ 83.943117][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 83.951887][ C1] index 26764 is out of range for type 'const int[34]' [ 83.958743][ C1] CPU: 1 UID: 0 PID: 633 Comm: udevd Not tainted syzkaller #0 28dc4f15f82f041c91cead1444746a7bfe1433af [ 83.958767][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.958778][ C1] Call Trace: [ 83.958783][ C1] [ 83.958791][ C1] __dump_stack+0x21/0x30 [ 83.958819][ C1] dump_stack_lvl+0x140/0x1c0 [ 83.958842][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.958865][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 83.958892][ C1] dump_stack+0x19/0x20 [ 83.958914][ C1] ubsan_epilogue+0xe/0x40 [ 83.958929][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 83.958954][ C1] aiptek_irq+0x1f3c/0x2a00 [ 83.958978][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 83.958997][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 83.959024][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 83.959064][ C1] dummy_timer+0xa3f/0x4900 [ 83.959090][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 83.959106][ C1] ? timerqueue_del+0xd7/0x130 [ 83.959123][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 83.959149][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 83.959164][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 83.959191][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 83.959215][ C1] ? read_tsc+0xd/0x20 [ 83.959237][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 83.959259][ C1] hrtimer_run_softirq+0x159/0x560 [ 83.959274][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 83.959300][ C1] handle_softirqs+0x1aa/0x620 [ 83.959317][ C1] __irq_exit_rcu+0x47/0xb0 [ 83.959333][ C1] irq_exit_rcu+0xd/0x30 [ 83.959348][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 83.959375][ C1] [ 83.959380][ C1] [ 83.959386][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 83.959411][ C1] RIP: 0010:set_nlink+0x40/0x1a0 [ 83.959434][ C1] Code: fe 49 bc 00 00 00 00 00 fc ff df e8 5a 4a 95 ff 31 ff 44 89 fe e8 90 4e 95 ff 4d 8d 6e 48 4c 89 eb 48 c1 eb 03 42 0f b6 04 23 <84> c0 0f 85 fa 00 00 00 45 8b 65 00 31 ff 44 89 e6 e8 6a 4e 95 ff [ 83.959448][ C1] RSP: 0018:ffffc9000e8cf770 EFLAGS: 00000a06 [ 83.959464][ C1] RAX: 0000000000000000 RBX: 1ffff11022461481 RCX: 0000000000000000 [ 83.959475][ C1] RDX: ffff88811dfccc00 RSI: 0000000000000005 RDI: 0000000000000000 [ 83.959487][ C1] RBP: ffffc9000e8cf798 R08: ffff8881016520af R09: 1ffff110202ca415 [ 83.959500][ C1] R10: dffffc0000000000 R11: ffffed10202ca416 R12: dffffc0000000000 [ 83.959513][ C1] R13: ffff88811230a408 R14: ffff88811230a3c0 R15: 0000000000000005 [ 83.959528][ C1] kernfs_iop_permission+0x3d4/0x590 [ 83.959550][ C1] ? __cfi_kernfs_iop_permission+0x10/0x10 [ 83.959577][ C1] inode_permission+0x250/0x4c0 [ 83.959597][ C1] link_path_walk+0x22d/0xeb0 [ 83.959616][ C1] path_lookupat+0x8d/0x440 [ 83.959637][ C1] filename_lookup+0x22d/0x5a0 [ 83.959657][ C1] ? __cfi_filename_lookup+0x10/0x10 [ 83.959681][ C1] ? __cfi___check_object_size+0x10/0x10 [ 83.959698][ C1] ? kasan_save_alloc_info+0x3a/0x50 [ 83.959726][ C1] vfs_statx+0x106/0x210 [ 83.959746][ C1] ? vfs_fstatat+0x1d0/0x1d0 [ 83.959766][ C1] ? getname_flags+0x203/0x6b0 [ 83.959784][ C1] vfs_fstatat+0xe5/0x1d0 [ 83.959804][ C1] __se_sys_newfstatat+0x127/0x3c0 [ 83.959826][ C1] ? __x64_sys_newfstatat+0xc0/0xc0 [ 83.959849][ C1] ? call_rcu_hurry+0x30/0x30 [ 83.959873][ C1] __x64_sys_newfstatat+0x9f/0xc0 [ 83.959895][ C1] x64_sys_call+0x1821/0x2ee0 [ 83.959910][ C1] do_syscall_64+0x57/0xf0 [ 83.959929][ C1] ? clear_bhb_loop+0x50/0xa0 [ 83.959951][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.959973][ C1] RIP: 0033:0x7f4f66911b0a [ 83.959986][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 83.960000][ C1] RSP: 002b:00007fffa5e8b218 EFLAGS: 00000202 ORIG_RAX: 0000000000000106 [ 83.960017][ C1] RAX: ffffffffffffffda RBX: 00005573493b5024 RCX: 00007f4f66911b0a [ 83.960030][ C1] RDX: 00007fffa5e8b220 RSI: 00007fffa5e8b2b0 RDI: 00000000ffffff9c [ 83.960042][ C1] RBP: 0000557355ed3d40 R08: 00005573493b5024 R09: 0000000000000000 [ 83.960053][ C1] R10: 0000000000000100 R11: 0000000000000202 R12: 0000557355ed3e30 [ 83.960064][ C1] R13: 00007fffa5e8b2b0 R14: 00007fffa5e8d3f0 R15: 00005573493bbbcc [ 83.960081][ C1] [ 83.960087][ C1] ---[ end trace ]--- [ 84.480911][ T10] usb 4-1: USB disconnect, device number 38 [ 84.481089][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19